{"report_id":"62ca0d9e-6ee3-461d-b623-5265c9efbcc1","version":6,"status":"done","tags":[],"date":"2026-04-18T15:22:38Z","url":{"schema":"https","addr":"nesa-connect.pages.dev","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nesa-connect.pages.dev/","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"title":"$NES token airdrop is now live!","dom":{"size":535,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (535), with no line terminators","md5":"8ee3d578097853593e2a49bb91693729","sha1":"3be2a1ba06b5b3a644ea1551b6ec455e1a85df14","sha256":"a6db434987448169c2464fd0ac5f552d19f0f3be6629c6eb2dd83a3b46cfc70a","sha512":"9d1633a1c29714f2a979baa5f26695e8fd9d3ef5cf54815484bc852e556d628b364b41e693337f3d082c86fda4da0c7834e43ac24aa0ff8a5316061ae9acd650","ssdeep":"","tlshash":"eff020ee1f08da9428a5e39276fd7f44183988868c8384001ca425d5ca0dbdbda173ca","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"2026-04-18T15:22:44.180834Z","last_seen":"2026-04-18T15:22:44.180834Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nesa-connect.pages.dev","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.179","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T15:22:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-18T15:22:15Z","timestamp":1776525735,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55126,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-18T15:22:15.425540+0000\",\"flow_id\":2124650018988242,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":55126,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"nesa-connect.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3552,\"start\":\"2026-04-18T15:22:15.418002+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-18","alert":"Hunting_JS_WebAssembly","trigger":"nesa-connect.pages.dev/c00b1521_zm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-04-13T00:20:36.548247Z","alert_count":0,"request_count":2,"received_data":439555,"sent_data":867,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-12T22:33:20.808909Z","alert_count":0,"request_count":2,"received_data":1830612,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":13650,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.web3modal.com","ip":{"addr":"104.18.28.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-04","domain_rank":1350703,"first_seen":"2023-08-14T09:56:24Z","last_seen":"2026-04-12T20:25:18.75454Z","alert_count":0,"request_count":2,"received_data":741,"sent_data":1133,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"verify.walletconnect.org","ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":888818,"first_seen":"2023-09-09T18:57:34Z","last_seen":"2026-04-17T21:51:07.581858Z","alert_count":0,"request_count":1,"received_data":1148,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nesa-connect.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-18T15:22:40.381366Z","last_seen":"2026-04-18T15:22:40.381366Z","alert_count":12,"request_count":11,"received_data":2824425,"sent_data":5404,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":8,"received_data":233744,"sent_data":4580,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-12T22:35:46.689898Z","alert_count":0,"request_count":2,"received_data":404592,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"userstatics.com","ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2020-11-05","domain_rank":262534,"first_seen":"2020-11-05T23:01:51Z","last_seen":"2026-04-16T09:18:27.842133Z","alert_count":0,"request_count":1,"received_data":539,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"391918d06690472208023034dce64fe9","sha1":"e980c67b30d2bfef6563a54de82c79eb61c550cb","sha256":"44a1ddc4d402db7a2cef92158cd06f9b9f5b286d4babb237f7be38477253a8ce","sha512":"fd7152cdf53e9d9e7d945f3802832b6daf03344328f5c6e9c26816314c9285b4b0756a2d936e116ef19d2c1d752f993b815857e6e08dee5afa4620598906e126","ssdeep":"","tlshash":"0f1102153860b4a353bb0279a11fc14bf770d87b375d5a90b4ac8cb62930d7b5492e8e","size":1000,"data":"","first_seen":"2026-03-25T23:39:10.311847Z","last_seen":"2026-05-10T18:36:29.566704Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/crypto-js@latest/crypto-js.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b481d280be0331ef01b43c2d9b2a58c","sha1":"4e84b6508f97c27e80a3fdeea2923d489d2b8fc5","sha256":"ee02257ffbaf0a9b481c7039b0f3bb20c360c9674fe4be8b38ae709b2ea59bbe","sha512":"5d16c543e6615e6d6038ed33eba339204322bccafead759833d0eb364aa0a46436f5763bfc4f4f568bfefb0cc85dad8bb7866fda02c38b77f550a1652fad0715","ssdeep":"6144:nBx4x8tgo06sGxw8nE94ltDxa6REI/eYcicDmcKCU4MJ9x8BRnE6qWpYbc4sx6tm:nBx4x8tgo06sGxw8nE94ltDxa6REI/el","tlshash":"40248544afd454c0f853b55e1fafb804f1b2701b0990dc09b94d9ab0ff65a348ae5be9","size":219092,"data":"","first_seen":"2023-10-25T02:14:38Z","last_seen":"2026-08-02T04:23:55.879825Z","times_seen":1238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verify.walletconnect.org/c4a255e70a611babc6afcc0beda62069","fqdn":"verify.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d576a60fa6534df09c1f172f270db164","sha1":"8118e8e4b64257d1670fc5a5affd29f5c43da154","sha256":"9a7fb70de58d6598f6f888e7be2f71c912fe47e12254b6d772a5dcd89497ca76","sha512":"703984952f1b78cad490bf87ee101a7796e641cba2670f5366f8208f766bea0f443323868e9618ab80c19296282a20a77677fc01ab73b352de12d5ca62e34e37","ssdeep":"","tlshash":"7ff00ede1f08ab942456c36273ad7e402439888accc344001c2426c6da0eadbe2273cb","size":479,"data":"","first_seen":"2026-04-18T15:22:44.196658Z","last_seen":"2026-04-18T15:22:44.196658Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/c00b1521_zm.js","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83d4bb5adf70d53087e8d5381e547db6","sha1":"1802d67dbcfa9b3fe2fcfda4b210c88fe7cda1db","sha256":"b1d19e007dc482ce0a76926a76e76dd8cf63fcb8c2ee3db13be2e154732e9278","sha512":"3ebba5093b9baae3f66cd5fb9ec016df3d569d093ead5b064c8ecca7273eb2d1e60e536e8722e274f7b181a6b03836c1ee097fd93934c09d8b82d2fdbc6c016a","ssdeep":"","tlshash":"c311217f7278414aa71adac5b4ce7162ac0542334305a5acb4ae67bccbda05d41f0b1e","size":1000,"data":"","first_seen":"2026-03-24T22:26:13.943024Z","last_seen":"2026-04-18T15:22:44.197558Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/js/webfont.js","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a03c2a7cdd91ff4f38e0d643b354e87","sha1":"4dc377dc1222e2998d9dd359e900a773eb1d90f3","sha256":"d073aa662156a87c292431a2736866f5a3254c2640ce7dcfe36bd767d145cd6d","sha512":"afef7a4c46fd09a9d007356dbd4b1c1a14889cad5602814917258072bbcc97fd59b0bb027f7d8be02dfc04d157ed79993298b49cf064bc732251c75c0a1c3d8a","ssdeep":"","tlshash":"0e1121bdbe80717787c051f67f2fe0cf922ee58d344e46545401c1e5083a15a81ede64","size":1000,"data":"","first_seen":"2023-06-04T15:17:11Z","last_seen":"2026-06-07T01:31:19.1394Z","times_seen":967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"665a1c0e5bfdf171065e4f6537812535","sha1":"4a7a349db08339920c2d91fda84e8104289dba92","sha256":"2e01f92b4b10776280cb09ee9cb4c669f313ecf8ee9d268de05432b5757fa9cc","sha512":"6529c96fe0a7c523b904f18e5a5b81c3f69ba183dcfd02fed8f989adc731c9072f343b2fc7215015b720e37f7011b1546f3873e8ec925152498db404ed2cb1b7","ssdeep":"","tlshash":"b411abc636a1b1c552bf64f5424fc047b436de7306cc90448a69c8fd2cb8d0a82eba2a","size":1000,"data":"","first_seen":"2024-08-20T14:44:52.392951Z","last_seen":"2026-06-01T09:40:57.108364Z","times_seen":911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/js/webflow.264a14023.js","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71d4cae3da61a6d99b991865f26701e6","sha1":"65316b17755ce8ea4bb740586d046aef8e2d5f1c","sha256":"9031bc7b610ac641f1097efa8ed51f4486d5c76b06623c0239175112ac9335ea","sha512":"500757649ffc7ef2c0c499541ba6ff10d1a2d509f47a084559062b09975f025f969c46210eed581e57808f940cf25cadc9c0d53326dedf39818016178c13e5eb","ssdeep":"","tlshash":"8a1125a73954bb9300a688ea893e9389f625503c4439d0d44f95c9b899e048b10d1eb7","size":1000,"data":"","first_seen":"2026-04-18T15:22:44.199037Z","last_seen":"2026-04-18T15:22:44.199037Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e321582636896fc4bb822d795da353ba","sha1":"4313afc4f3944e8e723a81c7bd0f06199b397df7","sha256":"b4b1f95f90a04d5cd38c9b72c0debff6323025ae9b4d8d3ab78bcf3d272326cf","sha512":"1e1aaa44434759ea2eb2f5803bd548458bfdb10e41d78735d60a4cd8b08fb7e453b10bb0c43526059656b0472126194fde42c182a145369420a1faae14b043bc","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvD36ip3h8cAowEjOPrBeU6QLiTFbc0QlQvakV:AYh8Kip3hubf6IidlrvakdtQ47GKl","tlshash":"179309ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bc78a4e827bf7d","size":89938,"data":"","first_seen":"2023-11-04T23:44:36Z","last_seen":"2026-06-23T16:32:11.312429Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"userstatics.com/get/script.js?referrer=https://nesa-connect.pages.dev/","fqdn":"userstatics.com","domain":"userstatics.com","tld":"com"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fea7fbf2c619fd4b7716fcaa64070c6c","sha1":"f192732937981a26f526b7c1293a2ae13bc59a22","sha256":"df9690fea031319de38a437cb6d393026c4aae70642ed394c4254ed64f035b26","sha512":"145c293c29dc95f829b71b3e7378fac6a17d3081f9d2e17a986bed2cc5f07f4bc35e791010264c841f02057a64a9f297d4f62335fef59f0c237a541599edb6c3","ssdeep":"","tlshash":"61c09b148f1d87f5203642de75e3c3c8947460e67515d40a644f64f95599ed30ec1d91","size":133,"data":"","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-08-01T23:42:27.382464Z","times_seen":5197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nesa-connect.pages.dev/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bt1S72r2acwxSbbf6spIEudEv5N6AbjESWiQZk7NBAJryDdruxd8Gd0JCbqJp%2Ftqqv0gQhwGjyHO85ByNJJkBy4IK8t%2BcICkCytwubW6x%2FbNS4PDPaTbmZbvE7E%2Fo3KCZGsUawbzOPRg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c31ec229eeb985dbe0b8027660d761e7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4a9f898171a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"e321582636896fc4bb822d795da353ba","sha1":"4313afc4f3944e8e723a81c7bd0f06199b397df7","sha256":"b4b1f95f90a04d5cd38c9b72c0debff6323025ae9b4d8d3ab78bcf3d272326cf","sha512":"1e1aaa44434759ea2eb2f5803bd548458bfdb10e41d78735d60a4cd8b08fb7e453b10bb0c43526059656b0472126194fde42c182a145369420a1faae14b043bc","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvD36ip3h8cAowEjOPrBeU6QLiTFbc0QlQvakV:AYh8Kip3hubf6IidlrvakdtQ47GKl","tlshash":"179309ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bc78a4e827bf7d","first_seen":"2023-11-04T23:44:36Z","last_seen":"2026-06-23T16:32:11.312429Z","times_seen":47,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/crypto-js@4.2.0/crypto-js.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:16.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /crypto-js@4.2.0/crypto-js.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:16 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9ee4a9fcefd25ebd-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 1406894\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 18 Apr 2027 15:22:16 GMT\r\nlast-modified: Fri, 09 Jan 2026 01:00:56 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:7gIlf/uvCptIHHA5sPO7IMNgyWdP5L6LOK5wmy6lm74=:\r\nfly-request-id: 01KEG4AMDCZFQXP1NECZ2JC9RD-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219092,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4b481d280be0331ef01b43c2d9b2a58c","sha1":"4e84b6508f97c27e80a3fdeea2923d489d2b8fc5","sha256":"ee02257ffbaf0a9b481c7039b0f3bb20c360c9674fe4be8b38ae709b2ea59bbe","sha512":"5d16c543e6615e6d6038ed33eba339204322bccafead759833d0eb364aa0a46436f5763bfc4f4f568bfefb0cc85dad8bb7866fda02c38b77f550a1652fad0715","ssdeep":"6144:nBx4x8tgo06sGxw8nE94ltDxa6REI/eYcicDmcKCU4MJ9x8BRnE6qWpYbc4sx6tm:nBx4x8tgo06sGxw8nE94ltDxa6REI/el","tlshash":"40248544afd454c0f853b55e1fafb804f1b2701b0990dc09b94d9ab0ff65a348ae5be9","first_seen":"2023-10-25T02:14:38Z","last_seen":"2026-08-02T04:23:55.879825Z","times_seen":1238,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:17.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 23:13:44 GMT\r\nexpires: Sat, 17 Apr 2027 23:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 58113\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-03T13:29:45.929506Z","times_seen":19438,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":204,"dns":0,"connect":24,"send":0,"wait":9,"receive":1,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:17.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 22:21:10 GMT\r\nexpires: Sat, 17 Apr 2027 22:21:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61267\r\nlast-modified: Tue, 09 Sep 2025 18:33:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29532, version 1.0","md5":"291e7d3e1fd408b2cf6fbcb28a590f08","sha1":"8f93490b55961aa59508b37251016aac163221e5","sha256":"89bc594ee3033a3d736996425a6bebe570bdd86521b77a8c13aa961ed84a96f0","sha512":"e95e86a14b11327afddb1f36dbcb6e6a33069fa8af0978026d8d180ccc4996c41c54a26b459fb16829bd5b4ab64b7e87601c07ba9dbdeb179aec9e3b6baa1ad9","ssdeep":"768:9VrigLoRKcpMRfnjFnp7Rd5ilmKPJo9BmMqkp3:frilRhpCbZplWlmd/r","tlshash":"98d2e16e9ec8ba440e517f565b61e2ee7ed7f08040094f6bf4692323d448ed90db4f02","first_seen":"2025-06-05T19:50:12.474325Z","last_seen":"2026-08-03T04:41:39.577272Z","times_seen":1355,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:17.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 23:13:44 GMT\r\nexpires: Sat, 17 Apr 2027 23:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 58113\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-03T13:29:45.929506Z","times_seen":19438,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":62,"dns":1,"connect":21,"send":0,"wait":10,"receive":2,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/crypto-js@latest/crypto-js.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /crypto-js@latest/crypto-js.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 44\r\nlocation: /crypto-js@4.2.0/crypto-js.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9ee4a9f8cfbe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219092,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T13:28:06.233495Z","times_seen":17690637,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":32,"dns":2,"connect":9,"send":0,"wait":46,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/web3/4.2.2/web3.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/web3/4.2.2/web3.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 130640\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65451b10-1fe50\"\r\nlast-modified: Fri, 03 Nov 2023 16:08:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Thu, 08 Apr 2027 15:22:15 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1tYMf%2FxAy2GG7r6IpFLfHX%2Bjc85yjv6%2BzK2vL1RaFInOy%2BNSRbo%2B2MxnvXhUwGtMnsBkQ0vsBtgABNsb9VY9%2BnEXwJ85qkPLulyE2Gu3K6F8Ufas6G9BdjI1qMpbEFy3ZETTKhAN\"}]}\r\ncf-ray: 9ee4a9f8cfb24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":583856,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"54f0dba228c2f274d5125cd4ec7aada5","sha1":"f846dbc495f0e286b9ce891a96ea7f468cf04a21","sha256":"de37dc6fd3cc22afce4846979284b0f1d9cac0601dc751cbd081fc4eeb0c58c5","sha512":"603d29fe6adf2127cd8c6e164bff03c7587a859c74fc88021497d047c9525dfff2dbd272f897198f5b3ae7f02bdb6c41c2f2bcc5ed6ed4143fc3613611daf6d9","ssdeep":"6144:vNllwb7xRtdqCH6dPB8i1VpXPU/Cx9C5UqGcX6e+ATCQ0PXIve/vX3Z2Wx:vGXZTSaeAT8hx","tlshash":"31c44b847690f0a10bdb50e554f70002f234b965705d94a4b7ba9cebbea9ecda137f38","first_seen":"2023-11-04T19:43:47Z","last_seen":"2026-08-02T04:23:55.912104Z","times_seen":275,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":23,"dns":2,"connect":1,"send":0,"wait":114,"receive":5,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.24\r\nx-jsd-version-type: version\r\netag: W/\"13877-yvQx6m3IVnvgENB/T31XmBY4Id4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\nage: 4982\r\nx-served-by: cache-fra-eddf8230135-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79991,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49001)","md5":"e8f033d3c7a50e4abe3d98ac65234d13","sha1":"caf431ea6dc8567be010d07f4f7d5798163821de","sha256":"7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac","sha512":"ecad9d89ce602e5121c97135933a33122f0d9b32c15b43949d5fbe51fe576da069e9a416772117eb4666d8354b685046c0d7a3e086f669fffa488e2f05ff0ba3","ssdeep":"1536:iw46xylPIZSKcO355lcVU/SZ2DUdzI8bRj:PxYIvTlcVU/62mI8d","tlshash":"e173f8916a00f03776bb45ae65d1e7047ae99405fcb34894f42cc8804fe7d4f26b7aba","first_seen":"2026-03-20T09:57:21.567576Z","last_seen":"2026-08-01T07:53:28.139447Z","times_seen":2839,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":94,"dns":1,"connect":29,"send":0,"wait":23,"receive":3,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Plus+Jakarta+Sans:regular,500,600,700,italic,500italic,600italic,700italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:16.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Plus+Jakarta+Sans:regular,500,600,700,italic,500italic,600italic,700italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Apr 2026 15:22:16 GMT\r\ndate: Sat, 18 Apr 2026 15:22:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12964,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a2591431387643ea8b4acee4893a6dcb","sha1":"6ace272d7107cccc38f16419163869e471fb9dfb","sha256":"f982b92076bb1415b9bd8d7917ca62baec7225a6ee5cdcdcba0706dceaf011fa","sha512":"f33959e3ac460717431752c4598d2bb0e782128b03c51cba4512439bc87ed09107576bbb8dd080692dacbdccccb515e9f02f7a0a52dc3f3732d0b25dd73f568e","ssdeep":"192:4kgnkwakYHKkMPgnPwaPYHKPM2gn2wa2YHK2MpgnpwapYHKpmCXbR4/CswRDmCRB:4tnuPqfIn7wqUXnw1qdKnlGqjVrNR","tlshash":"b042c2a0092fe54067831dc763cf3d368e9ea195705954b59bfd0858ec79c2a33b171c","first_seen":"2025-09-26T19:43:25.755712Z","last_seen":"2026-08-03T04:41:39.638964Z","times_seen":71,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":110,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:17.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 23:13:44 GMT\r\nexpires: Sat, 17 Apr 2027 23:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 58113\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-03T13:29:45.929506Z","times_seen":19438,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":189,"dns":1,"connect":20,"send":0,"wait":8,"receive":2,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"userstatics.com/get/script.js?referrer=https://nesa-connect.pages.dev/","fqdn":"userstatics.com","domain":"userstatics.com","tld":"com"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:17.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"userstatics.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 18:42:22 GMT","end":"Mon, 01 Jun 2026 18:42:21 GMT"},"fingerprint":{"sha1":"18:0A:C0:7A:B2:8A:E2:12:D0:C0:A8:37:4C:3E:33:C4:A8:B0:31:D8","sha256":"A7:A8:54:0B:C5:5D:9D:CE:62:D3:8E:AF:2B:23:40:9A:9F:7A:46:6B:B8:AD:C6:B8:56:81:F1:42:A5:32:7C:14"}}},"request":{"raw":"GET /get/script.js?referrer=https://nesa-connect.pages.dev/ HTTP/1.1\r\nHost: userstatics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sat, 18 Apr 2026 15:22:17 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 133\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.2.1\r\nAccess-Control-Allow-Origin: https://nesa-connect.pages.dev\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Allow-Headers: X-Requested-With,content-type\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"fea7fbf2c619fd4b7716fcaa64070c6c","sha1":"f192732937981a26f526b7c1293a2ae13bc59a22","sha256":"df9690fea031319de38a437cb6d393026c4aae70642ed394c4254ed64f035b26","sha512":"145c293c29dc95f829b71b3e7378fac6a17d3081f9d2e17a986bed2cc5f07f4bc35e791010264c841f02057a64a9f297d4f62335fef59f0c237a541599edb6c3","ssdeep":"","tlshash":"61c09b148f1d87f5203642de75e3c3c8947460e67515d40a644f64f95599ed30ec1d91","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-08-01T23:42:27.382464Z","times_seen":5197,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":157,"dns":36,"connect":53,"send":0,"wait":141,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.com/getWallets?page=1\u0026entries=4","fqdn":"api.web3modal.com","domain":"web3modal.com","tld":"com"},"ip":{"addr":"104.18.28.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:18.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 22:57:55 GMT","end":"Thu, 09 Jul 2026 23:57:46 GMT"},"fingerprint":{"sha1":"A8:BF:5A:84:D1:74:E3:0C:A3:99:26:95:35:36:86:52:6F:23:3B:4E","sha256":"F0:7A:2E:06:DA:64:2F:AD:1C:19:95:D7:17:EF:B9:D3:CA:18:B6:4E:B7:47:8E:DA:0E:29:DB:64:77:60:24:EA"}}},"request":{"raw":"OPTIONS /getWallets?page=1\u0026entries=4 HTTP/1.1\r\nHost: api.web3modal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-project-id,x-sdk-type,x-sdk-version\r\nReferer: https://nesa-connect.pages.dev/\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 18 Apr 2026 15:22:18 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: x-project-id,x-sdk-version,x-sdk-type,x-nonce-jwt,x-otp,Authorization\r\naccess-control-allow-methods: OPTIONS,GET,POST,PUT,PATCH,DELETE\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-ray: 9ee4aa09b9ab2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T13:28:06.233495Z","times_seen":17690637,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":50,"dns":22,"connect":4,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/c00b1521_zm.js","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /c00b1521_zm.js HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6K8wjpmUrhYCL1%2F1KjF6SzuqD%2FnxtZ2QA%2FXV14R6RHdIFDLiSTyVP%2F8w4i6K4TqXrpAbLjEdYaSE7ncPcJ80dyG1cy%2Fx0CSun3MqoV0XHHGwQ0YB5J1N9Y0c4pS2DfmVqBOEJZa%2F0IVP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ec0907096a0b1d6f7bfe55238b286302\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4a9f8980b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1463968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13366)","md5":"1a72f4429f3ee68223a54ecdd377bb15","sha1":"d3173e0c2c046ca6cec278e5db257dc72eba8f2d","sha256":"73566ef530819bd13e5fed4e3bba009efb05481a4282c5f7baf0c78e9c54eafd","sha512":"fb89eeb38e9ff44eb2238c0462b0abaf97dc011068a90325d4249b05ab18af3fc45fbaff3a6b464d6bab311754448c629e961037fbeefc0a6d72cbf5588342ce","ssdeep":"24576:XlXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJbf:5jBXpyI6yQo7ebCNtHf","tlshash":"98252334b7132f7eef18c7e9d286270e3c5916d3d859d4e8faac00e68396d844c9ad54","first_seen":"2025-10-19T09:01:10.729159Z","last_seen":"2026-04-18T15:22:44.187669Z","times_seen":13,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-18","alert":"Hunting_JS_WebAssembly","trigger":"nesa-connect.pages.dev/c00b1521_zm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/css/patricks-sublime-site-c0fa55.webflow.dc6c95255.min.css","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /css/patricks-sublime-site-c0fa55.webflow.dc6c95255.min.css HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrPelVz%2FI9vqcocrG7XKUK5oxhIWrws9oUl%2BcJu9naoOOBFRxOTK8tzeQhZpPDoqh%2BOvl6M0w%2BhsDGOLrqflDtYYTTxiyAqPegVRyjyt0k64DrtKoFuVsZuXHc4VdX0%2BdnU8ebLpibUO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bc95d52be542205342db5ffd26680c77\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4a9f8980e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105554,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"832dd0615fc60ecef370d1147a5f8e9c","sha1":"f3396d50ea87fe9716a429e0b5d3d22ff92d60ac","sha256":"2af48f8468ea58e509258d6ae7286b0853a5f1dd1a73ed67995c298638b91876","sha512":"bafb844bd4d0d97a9f69c98559076c50b245a49591aac26e967d95209ce8d06b142b1590c0e91b7bc9c54401dfd7029c6b7cae9d431cde913bc45dae6684a8b2","ssdeep":"1536:N1Sff+lkAywLs39wMaiC7nx+1Mo1/EKJy+/jMffCE/PP74A:NwfzAgPC7E1Mo1cKJy+/jMnCE/PP8A","tlshash":"30a3f6316a55711cb43b8466a5d0e7ccb5298043d7978beafd12e237cace1d32b32a5c","first_seen":"2025-10-19T09:01:10.70047Z","last_seen":"2026-04-18T15:22:44.18819Z","times_seen":5,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/fonts/6593de79fc1d07bd51a77401_Nightingale%20v2.0.ttf","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:16.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /fonts/6593de79fc1d07bd51a77401_Nightingale%20v2.0.ttf HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/css/patricks-sublime-site-c0fa55.webflow.dc6c95255.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:16 GMT\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fd9ir5SR%2Bv5XojQ7wbNNWX9i%2F%2FDZA68lXsx6g5JNe4yDUUNTNKGD%2FQLHkNLECL%2Bj%2BlFAzuC4%2BRUFdzx15JhK9WRFNbSQsU0joPDhMk7ejePPXQ93RtHLMTmK65%2F9iWXV3KzrSf4z8YG6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bdef3829c8e6776094439641f8250580\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4a9fb1f0f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57388,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 17 tables, 1st \"DSIG\", 19 names, Macintosh, type 1 string, DT Nightingale LightRegularDT Nightingale LightVersion 1.000DTNightingale-Light","md5":"a8ef64e3b30fcd0f32b4bb1d2ea301bb","sha1":"0fe11687016a7158998b67e9e2bb1cbd0e61d1ce","sha256":"1c09352175bbc2fde19920b085af25354a6124a751235d32e9e0eef54051ca4f","sha512":"2d4255036657459c284853ba16bc7332207b0b206cad0835f2d9b9e8899d101f8cb8c80b6af25c705dbda4ce5fab5ad87f555ec49fa538fffda488b8c2ff4348","ssdeep":"768:gtn779BSM1gkDNbuOFCk9auIjfCrlT0CJY1erHEsuNcpn+D8ywtHJraMfLb:sn7hFCkAO8qaxeOlerHEsGJD6BrfLb","tlshash":"37434c05b753b509f51aea3c8da2e2398bf0f0115f7b424df1931a73d89d2849c9b78a","first_seen":"2025-10-19T09:01:10.568162Z","last_seen":"2026-04-18T15:22:44.188676Z","times_seen":5,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verify.walletconnect.org/c4a255e70a611babc6afcc0beda62069","fqdn":"verify.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:16.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 15:10:09 GMT","end":"Thu, 16 Jul 2026 16:10:06 GMT"},"fingerprint":{"sha1":"71:CE:62:C1:7A:AB:00:FD:65:67:F4:BA:69:D2:D6:06:36:40:61:DD","sha256":"A9:A1:5D:5D:66:F0:3C:9E:CE:15:62:66:44:0F:EC:F0:8C:7E:91:A0:44:93:4E:22:56:68:2E:06:49:14:77:38"}}},"request":{"raw":"GET /c4a255e70a611babc6afcc0beda62069 HTTP/1.1\r\nHost: verify.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=180\r\ncontent-security-policy: frame-ancestors https://*.nesa-connect.pages.dev https://nesa-connect.pages.dev https://localhost:* http://localhost:* https://*.localhost:* http://*.localhost:* https://127.0.0.1:* http://127.0.0.1:*\r\nx-csrf-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3NzY1MjkzMzZ9.Tjy31coYixPwTHq2rWG7NNcaT2eh96pRaV564NfVCyo\r\nx-request-id: 1f98d75d-d2d0-4b3d-9bf9-648d12bcfc60\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4a9fbc82c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":496,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (496), with no line terminators","md5":"69a02bf8495391a078541c70f863e9d1","sha1":"a54adcf4e72b6bd0e736cc5ebebb649ee8344f7d","sha256":"f813407cef142a953f01b23c7c9c8dacaa05803f396f7337ec4f0975dbc4af3a","sha512":"1a92493e086429e46610a3a62c17611a46fbb9b2bbf304632a6aa77c010097c9881b64a2b881930ae72fe04cf6f5e1cdb0302271225077d36ab82ca6dc1030e7","ssdeep":"","tlshash":"64f005dd1f08db942455c35273bd7e4414358886ccc384011c6415d5d60dad7d5173cb","first_seen":"2026-04-18T15:22:44.189315Z","last_seen":"2026-04-18T15:22:44.189315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":57,"dns":32,"connect":2,"send":0,"wait":13,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/images/65bcd4e22f9d3b1bf3d887fb_Group%2047915%20%281%29.png","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:16.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /images/65bcd4e22f9d3b1bf3d887fb_Group%2047915%20%281%29.png HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 766\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c34fe04be59f5ba1e08b87bb937cc721\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pAZ4oiPq8jj2vuLCIx2uL7AfYpoertgG4G%2FiARE%2BztWeX%2FP9fc0%2Fb%2F3ZqaPV%2FoILVrUBPdpgSgzvqdMak0YqdCgD7aDlv6Fdw3aSiY%2FjH41u8pY61M7M4YKDS7lF4Edzmxdy2jPTE2qa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee4a9fd7e0f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d91ba9e1c51fca5e96635ce2291ebcbc","sha1":"42c6fa041ccb3a8e55f2fafe0eafab6c623fc72a","sha256":"1139fd2a26075d84be7059c24467f185d67ccb5bff89c4447b76619c45ea0ffa","sha512":"616774bc23f3132c24e47d3e17d57e3ca082d0850609013e7a8bd9cb586a0d0a907790cf7191a05e7a8f78c316dce18ebb017e803b2e6f43ee9c14ae74f47b2d","ssdeep":"","tlshash":"b501b5d4270e2ded4c0f957e9b6b0d548baf0cbd4b8aa20264ac0419912cd44bbebd58","first_seen":"2025-10-19T09:01:10.642775Z","last_seen":"2026-04-18T15:22:44.190263Z","times_seen":5,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/ethers/5.7.2/ethers.umd.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 174534\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6350cee7-2a9c6\"\r\nlast-modified: Thu, 20 Oct 2022 04:30:31 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nexpires: Thu, 08 Apr 2027 15:22:15 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nEc6DpYtIbykMsDGsTocExagdMADaq%2BgjZxKMU60xZZfvB37lHHoa0sPJGEoObex%2FQCNEheTrHt%2FLq%2FAbecryt%2FNGzP%2FWnl3K9qwnDvOP97EQvsiE%2F1BhxQQlXXT0Ve5BapZyyIh\"}]}\r\ncf-ray: 9ee4a9f8bfa84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1244736,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ca6faf0a0f73c1ad6c9ea94f01fd28c4","sha1":"dbee1c4b613e806a4d95f992c4152f373a800ec1","sha256":"5f0b3f5585c1e600821d5371d6943185224369e8917e4b4da29b15d92bdf27fc","sha512":"e21ebb998979e23ffc24cf881cf069aff945c0b44d2ecbaab0e4348a164bbf36f27cac9c5142ffc9948e5e72fb708d67f6409f98a917393a8153a1eafe7ada86","ssdeep":"6144:LHVoZzmiRJ1YlLsEE2q66xk79HVW9Lxg95uYiRrVQTg2RgeZDpyPd5rfPmdaqNCA:i6ikWi5LiRrqEdPyD","tlshash":"d325a149ebe560a1f613726d4f6fa049b634a0075844cc54bd5ce6a0bf9183887faff8","first_seen":"2025-08-01T06:46:10.101435Z","last_seen":"2026-07-10T21:01:34.344621Z","times_seen":106,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":30,"dns":0,"connect":1,"send":0,"wait":76,"receive":22,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/images/65c63c6429a65a2682193f1b_NESA-Icon-2%202%20%281%29.png","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:16.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /images/65c63c6429a65a2682193f1b_NESA-Icon-2%202%20%281%29.png HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 13948\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"24ff6a8259e209c95bb158fcbe3ac9b9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfxutwa4JNbs%2BuT0oTppXrf8%2FpTWg2qZ00fXkyoStHRbaWP3DqsaPkFeqUv1d8llZkFSfXXseXZtdA0ObSft4WwnFVVJOWu0R%2B5NR%2BY66EOVbREZuIMRP%2FjEFDBpHEJZ6cYypWFjS7gk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee4a9fb2f471a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 132, 8-bit/color RGBA, non-interlaced","md5":"d2380f942df11fed618d5cd48c51f17d","sha1":"6041d7c85db09a77ded78d9afe1a4cfc340c38bb","sha256":"0b5d494194c402297e3cf909073a6e3c4d40e35e4350abbf3d84a2d6c624bd85","sha512":"32b22a35b641afe7296f7f50fff758953d2b67b42bf88e1272543d569fe8874c9ede899f6d5e7b75694f5f1c1ccf534d1d3edefb5b08f019f430f39340854844","ssdeep":"384:DwL1bFG7XqUsC501cfoKemjUt45LyeB/gRp:E5bFGTqUZ035K9FoH","tlshash":"de52c08068b73957e79ecb24ee23a4410d94dfad13838b4b8103ad7c6e15486ab87ad1","first_seen":"2025-10-19T09:01:10.632405Z","last_seen":"2026-04-18T15:22:44.191391Z","times_seen":5,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:17.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 23:13:44 GMT\r\nexpires: Sat, 17 Apr 2027 23:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 58113\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-03T13:29:45.929506Z","times_seen":19438,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":68,"dns":1,"connect":7,"send":0,"wait":12,"receive":8,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.com/getWallets?page=1\u0026entries=4","fqdn":"api.web3modal.com","domain":"web3modal.com","tld":"com"},"ip":{"addr":"104.18.28.72","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:18.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Apr 2026 22:57:55 GMT","end":"Thu, 09 Jul 2026 23:57:46 GMT"},"fingerprint":{"sha1":"A8:BF:5A:84:D1:74:E3:0C:A3:99:26:95:35:36:86:52:6F:23:3B:4E","sha256":"F0:7A:2E:06:DA:64:2F:AD:1C:19:95:D7:17:EF:B9:D3:CA:18:B6:4E:B7:47:8E:DA:0E:29:DB:64:77:60:24:EA"}}},"request":{"raw":"GET /getWallets?page=1\u0026entries=4 HTTP/1.1\r\nHost: api.web3modal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nx-project-id: \r\nx-sdk-type: w3m\r\nx-sdk-version: html-wagmi-undefined\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 18 Apr 2026 15:22:18 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 9\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, s-maxage=300\r\nserver: cloudflare\r\ncf-ray: 9ee4aa09b9c42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"722969577a96ca3953e84e3d949dee81","sha1":"3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5","sha256":"78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3","sha512":"54b2b4596cd1769e46a12a0ca6ede70468985cf8771c2b11e75b3f52567a64418bc24c067d96d52037e0e135e7a7ff828ad0241d55b827506e1c67de1caee8bc","ssdeep":"","tlshash":"26500000000c000c33c3030000000f000003030000030000cf000003000000c00c000c","first_seen":"2023-04-05T07:39:32Z","last_seen":"2026-08-03T12:42:40.320073Z","times_seen":31855,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:17.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 22:21:10 GMT\r\nexpires: Sat, 17 Apr 2027 22:21:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61267\r\nlast-modified: Tue, 09 Sep 2025 18:33:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29532, version 1.0","md5":"291e7d3e1fd408b2cf6fbcb28a590f08","sha1":"8f93490b55961aa59508b37251016aac163221e5","sha256":"89bc594ee3033a3d736996425a6bebe570bdd86521b77a8c13aa961ed84a96f0","sha512":"e95e86a14b11327afddb1f36dbcb6e6a33069fa8af0978026d8d180ccc4996c41c54a26b459fb16829bd5b4ab64b7e87601c07ba9dbdeb179aec9e3b6baa1ad9","ssdeep":"768:9VrigLoRKcpMRfnjFnp7Rd5ilmKPJo9BmMqkp3:frilRhpCbZplWlmd/r","tlshash":"98d2e16e9ec8ba440e517f565b61e2ee7ed7f08040094f6bf4692323d448ed90db4f02","first_seen":"2025-06-05T19:50:12.474325Z","last_seen":"2026-08-03T04:41:39.577272Z","times_seen":1355,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T15:22:15.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYmIaFA8OSeBTO4vnYmhRTSX3LJHhU08qUXAK10JCA0yMnCgmS2akd2OqjZ7sN4%2BvvHGXhFRIc3mcmD5FUW8%2Fqj67WHwQUZYBmNe%2BIjsQVSp1wZeqHadxgedEasqAaMfPiqbOOB%2Fatnd\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4a9f67f89a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":419093,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23753)","md5":"904711f4b1920f17b008b484588a6d36","sha1":"13694390fd07fd432f607fe1cb5c0cf04eb2d962","sha256":"9da116e850cb3a291377afa9a46b79695777078036acd354261f5a21013a903d","sha512":"3b285b66d315f0f611c75f18ec07b8317b7cef884056f2cddbbe9ee6e3a421045560fb3a9c7ea60c135d20ebe89d85e5c09a20d616bde73bcc598f7050d17ede","ssdeep":"3072:9Ic0aOxyeBGvApExVxxiKfum5ovszQlNiKNQq:9Ic0+q","tlshash":"21948771464a6f2e111ef77180f87ebe561900468c76bb75b7a8c6ee873db1b84c4238","first_seen":"2026-04-18T15:22:44.192451Z","last_seen":"2026-04-18T15:22:44.192451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":57,"dns":42,"connect":1,"send":0,"wait":120,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"4edeb-1sQW5dFT9QD3rGbSWitz20WGetQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 31752\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\nx-served-by: cache-fra-eddf8230212-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 93933\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323051,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43040)","md5":"ca1104de538caea2d54265fbe90916b4","sha1":"d6c416e5d153f500f7ac66d25a2b73db45867ad4","sha256":"10d78c0a5e8664889dc8eb47c72bfa46ad0ed02c70a234be9acdefa27dbb24b0","sha512":"51fe1c1b91913f9108019b1d18ca38593175cbc827ee159e2942d62b2a9825317642833f17c2526ce292d9623e394cce1a750d9c6246c7eb201a57b15c8d8bc4","ssdeep":"3072:3dpgpHu8o3GVhW8Jg5bGpLsev6ns9oq1CfdfDWp1WrB33NjbLytdJ7bt3r:3fGVL2CNvms/CfdS1Dr","tlshash":"a6640989fba07052435671a5062f644fb67af92d5949006cf254e8fb3cf89c8a63bf34","first_seen":"2023-03-07T01:24:06Z","last_seen":"2026-08-03T12:39:39.890219Z","times_seen":2107,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":45,"dns":3,"connect":17,"send":0,"wait":15,"receive":21,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/js/webfont.js","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /js/webfont.js HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=72PM4SEgo1qBMXFCNF2QjG%2FDQ9NssdJ3Z0ZkC3gzPXkP9RCjqFMnnIDwhXc96pA375Z%2BzeTiZBrbeuENFanBee7zYj27soHkV3Ipzbjq86FwPEsmD9%2FZYFzGiI%2F3rSvsyBYaK%2FJGrvEm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7f3658462391a37242d0bdca0496e159\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4a9f898131a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13188,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2134)","md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-08-03T12:54:07.708418Z","times_seen":66497,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/images/65bcd33a240b56a435457637_NESA-Logo%20%283%29-p-500.png","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /images/65bcd33a240b56a435457637_NESA-Logo%20%283%29-p-500.png HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 7913\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"783d5c0daf6cc851f4c5afd5646ec9e7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPVwLdHeNrc%2BRvzY3Vbxf40EhslXeM638evWUz8SlSWjY5peCk1VcLUBlbOX%2F5cy2oF2gDvHptl6V4h0yujSiQ%2B6VyZ3TpxHPgm6n0W%2BUOLNKWGGjDhxXzpuFrsWcLvYY7FIxLMNnpIQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee4a9f898151a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 118, 8-bit colormap, non-interlaced","md5":"5023e69cd5623608cd019dae36c9cd06","sha1":"bbe5922e56bf799e390eea1690ddfca640bd272f","sha256":"012835d84dbe847a1b61dee7b0d489b9f71ee3b3918ec4645800797f8b3274d2","sha512":"0c19afa8c643ef694a747e6861137da8e3fbc6ad339a45fecc587cb15134917eb3a656d5974ab85655f29b10ec85bd6e6fdabb01cb59b62989f893d777901de9","ssdeep":"192:+S1fRtRLSqPkQKvV55giIhv9gJlq0x90M8:h6qPk7vVnLIJ9AxKM8","tlshash":"4df18df0b9f0762fd7d4b7491f6320f440d312fc206167a175e46a2193aee392d141ae","first_seen":"2025-10-19T09:01:10.480485Z","last_seen":"2026-04-18T15:22:44.19443Z","times_seen":5,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/js/webflow.264a14023.js","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:15.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /js/webflow.264a14023.js HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:15 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qwDlTDxo0IeItvxJDuIIFmy7Nzl8VqSs68YmbLjaBUuHspZenN6Iz35kr122Pv1aP5TxgvbOeUisHKrkCkTD0xYTbSLrJeOEsIHU5FHXyK1sPpZHv%2BXs8zaOBjeMAdizInrNJELvxMIA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d327ae3d4e20bdd08fa58c113eb64f16\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4a9f898181a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639137,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39269)","md5":"264a140236864b84b4aacb1b1be49eb6","sha1":"338569582f065ae7fa7739c990523b530cbd0260","sha256":"315972c107fcdc6dab247800648eebdc74c63d191b7c7b4b215026a3bc55a32d","sha512":"5bf4d5d19c62fa3a0944a92409ad3cafae35bf1259a5f10b9f71433c5e670db508d4de524e641e6d25d9c4963f54cb3efb17fee7487fa4f180be44fc01304ca5","ssdeep":"3072:dqivmeEE0n0W+f1bCSCOak6yl92xBZy1v4Boug49mXXwve/GP8YSzRCyZN7qKlAN:wivun0BIi/ug4s/GPozgyZm","tlshash":"f8d48646366125fb42ab0359f8177c41a3b811e6c60ece6cdca9cdf81aed9e84713637","first_seen":"2025-10-19T09:01:10.664504Z","last_seen":"2026-04-18T15:22:44.194981Z","times_seen":5,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:17.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 22:21:10 GMT\r\nexpires: Sat, 17 Apr 2027 22:21:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61267\r\nlast-modified: Tue, 09 Sep 2025 18:33:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29532, version 1.0","md5":"291e7d3e1fd408b2cf6fbcb28a590f08","sha1":"8f93490b55961aa59508b37251016aac163221e5","sha256":"89bc594ee3033a3d736996425a6bebe570bdd86521b77a8c13aa961ed84a96f0","sha512":"e95e86a14b11327afddb1f36dbcb6e6a33069fa8af0978026d8d180ccc4996c41c54a26b459fb16829bd5b4ab64b7e87601c07ba9dbdeb179aec9e3b6baa1ad9","ssdeep":"768:9VrigLoRKcpMRfnjFnp7Rd5ilmKPJo9BmMqkp3:frilRhpCbZplWlmd/r","tlshash":"98d2e16e9ec8ba440e517f565b61e2ee7ed7f08040094f6bf4692323d448ed90db4f02","first_seen":"2025-06-05T19:50:12.474325Z","last_seen":"2026-08-03T04:41:39.577272Z","times_seen":1355,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa-connect.pages.dev/images/65bcd5589aea1bccbc8131fa_Group%2047916.png","fqdn":"nesa-connect.pages.dev","domain":"nesa-connect.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:16.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa-connect.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 18:27:36 GMT","end":"Tue, 07 Jul 2026 19:26:18 GMT"},"fingerprint":{"sha1":"DD:44:B6:3C:02:A7:2C:E2:95:61:86:0A:CB:BD:0D:A0:F5:E4:1C:74","sha256":"75:F1:D0:47:F1:95:51:F0:1E:0C:0F:E7:63:38:70:D8:6B:7D:38:05:79:44:D3:10:32:7F:5E:A2:45:FD:AE:40"}}},"request":{"raw":"GET /images/65bcd5589aea1bccbc8131fa_Group%2047916.png HTTP/1.1\r\nHost: nesa-connect.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa-connect.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:22:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 5074\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"871099eacf104ef6fabbedd34e434596\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wTCOr3Y6G1bAf0yWp6Be96ZLfu%2BbUwH7qP%2BwWeArMLCTj4whgrYJU2xuA3wm7B4Ziwrv9KX0M36hs38bPK0dIiSvJQ33UxFk5D%2BEPtA9kXebscxJ5mlwPw14dVNoyyD7QBMQs09P1b1Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee4a9fd7e0a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"394cd6b4dccfed97cab2b0a46fc1fcb2","sha1":"6a4c6d8c099bd6355d38dc0ce201001e331092ba","sha256":"48fa7d5f48f2104a1946b355e78efcf52462b85f5a3305c421223aa0fe68d107","sha512":"834cc66176ed70ac568551c0254251ec3ebd4aa59c0771917aaae0fd6d657e57c1e1413b0658071105dc58dab4d1929c247b0527da1b6bc20106ec248567c579","ssdeep":"96:1SM97447fYot4nzfFEOjVRD++qPNWcH6cxLnQUYFyfYXofviTUoJY:1S074cYByORpqIczYFywYeUoJY","tlshash":"7ca12a0d866778e5363f7f89f29e249ca827b7575a40330829ed0b2210fb8db42958f1","first_seen":"2025-10-19T09:01:10.687791Z","last_seen":"2026-04-18T15:22:44.195564Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa-connect.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa-connect.pages.dev/","date":"2026-04-18T15:22:17.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa-connect.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 22:21:10 GMT\r\nexpires: Sat, 17 Apr 2027 22:21:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 61267\r\nlast-modified: Tue, 09 Sep 2025 18:33:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29532, version 1.0","md5":"291e7d3e1fd408b2cf6fbcb28a590f08","sha1":"8f93490b55961aa59508b37251016aac163221e5","sha256":"89bc594ee3033a3d736996425a6bebe570bdd86521b77a8c13aa961ed84a96f0","sha512":"e95e86a14b11327afddb1f36dbcb6e6a33069fa8af0978026d8d180ccc4996c41c54a26b459fb16829bd5b4ab64b7e87601c07ba9dbdeb179aec9e3b6baa1ad9","ssdeep":"768:9VrigLoRKcpMRfnjFnp7Rd5ilmKPJo9BmMqkp3:frilRhpCbZplWlmd/r","tlshash":"98d2e16e9ec8ba440e517f565b61e2ee7ed7f08040094f6bf4692323d448ed90db4f02","first_seen":"2025-06-05T19:50:12.474325Z","last_seen":"2026-08-03T04:41:39.577272Z","times_seen":1355,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}