{"report_id":"64c8838b-091c-4108-961c-5ec87a22937c","version":0,"status":"done","tags":[],"date":"2026-08-30T02:51:07Z","url":{"schema":"http","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"title":"1 new message","dom":{"size":134991,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4568)","md5":"605d7d40d07bd00e09957d0a28b141d2","sha1":"5443539e5e14d4a198c97e199e6eb21ea3f01fc8","sha256":"7497221aeb54cc33603fcc4b4c6e48ff14ba8ad559a738ef46a587b243c8adc8","sha512":"6abb489df15675bffaaf792eac37c4ebb70a54756e3a9e1076fd6691935a02bd6f9198c75a3d5f3aa722febb2b7ac83749441215f9dde829e8a7f537c143306f","ssdeep":"1536:KdlmmKOwmAOEULkXxY4eeYYZYhbA3SV8w9eeekeee/eeeQeeefeeeSeeepeeefew:Qp8Pjxxx59/qa8TAKJ1CO","tlshash":"52d3d95151e20105918390c0fea6af5d6b68c207c2058c7c77ef3967ef4eeb9ad2b7a4","dom_hash":"domhash4c0c0c23c8ac8e6b604b9eb1a49040b2","first_seen":"2026-08-30T02:51:13.407026Z","last_seen":"2026-08-30T02:51:13.407026Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":0,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-04T02:51:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":3,"received_data":105430,"sent_data":1731,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-08-25T02:30:25.401442Z","alert_count":0,"request_count":3,"received_data":6276,"sent_data":1686,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-08-23T23:16:58.176653Z","alert_count":0,"request_count":1,"received_data":21136,"sent_data":600,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-08-28T05:43:07.341812Z","alert_count":0,"request_count":2,"received_data":25369,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-08-24T17:34:10.3142Z","alert_count":0,"request_count":1,"received_data":278602,"sent_data":579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-23T23:05:01.76831Z","alert_count":0,"request_count":2,"received_data":305250,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vsb137.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":987350,"first_seen":"2025-02-25T13:08:50Z","last_seen":"2026-08-27T15:20:57.788013Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1105,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nexovabank.com","ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-08-30T02:17:23.887402Z","last_seen":"2026-08-30T02:17:52.052929Z","alert_count":48,"request_count":48,"received_data":1718238,"sent_data":57969,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":7,"received_data":253234,"sent_data":3995,"comment":"","tags":null,"fingerprints":null},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-08-24T21:09:43.85782Z","alert_count":0,"request_count":26,"received_data":1407967,"sent_data":12837,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"embed.tawk.to/6a743e9a9457901d462198d6/1jvb193iq","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed5b6be68ffbed03cda250ddedf0d8d5","sha1":"5b01808a63b6f85c7b2633b9e432b7447ed880e4","sha256":"b7dd283f39bc7732bf4c1746b3d8316cfceda7101869bd1451c1478a72051e0f","sha512":"2bd95486839ff2834bf066cace261db930dad1243779fca6e120da68d7dfce54737817bb9b01f62fe1c09e87e5fcc03eec047fd65ec4e660c18a42ea125bcf17","ssdeep":"","tlshash":"8941a9da5b4e5852932810e80caebd0e747b32e789b85c93870c04267a65fbd27c9d28","size":2123,"data":"","first_seen":"2026-08-30T02:17:30.740865Z","last_seen":"2026-08-30T02:51:13.474004Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-30T06:28:56.800422Z","times_seen":94577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","size":348923,"data":"","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-30T06:28:56.834298Z","times_seen":11252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"822357ee182d7599dbd8bccaf1135fee","sha1":"a715449d3db46546fd3f2cb4f29cc0a2296374da","sha256":"cc43558ab639c80d08ff24fe48929076e4596767601d22e882fdf3843f1f80a7","sha512":"e7fbb7574c2a7e6382dc818169f3fe873116258f483baf5975c5c1cc23e974f0207147f4d5ce90d4af7b2b7f43fca6ba55edddb18337c0ca213e70c2d0c46ad6","ssdeep":"768:Vlxfu8+HYUmI+rTZWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgbCBJf6stK4p:xfuroIf20UJWfO+Et7GZryqq0q","tlshash":"5533d8cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","size":54327,"data":"","first_seen":"2026-08-28T04:30:07.844276Z","last_seen":"2026-08-30T06:13:39.024114Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6aef912540ff1f056bd8ddade6e7bea4","sha1":"3d506ddea1700fb96aea9886a2b35476053dc1fd","sha256":"20482c90a37f75f3b7a67172f99751593b65a4bb566bdb9917d4d82aea174971","sha512":"f66d8134701e3103a856042a171e1ec6ecd4bd3c42d4468a618f8e632a15a3afbe11ff04293bb8e3260e87b2d671a61e274546e9e60753042788cd036849852d","ssdeep":"","tlshash":"d9212b1762a1643141fb38f91bdb5784372410836404d8573daedf4d0f2379269b3be8","size":1121,"data":"","first_seen":"2026-06-14T08:01:07.614618Z","last_seen":"2026-08-30T04:54:51.795103Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc67cd42e44d1e9f0a0a0f8ca7ac9da6","sha1":"8b46bf2e2262e9329d39c1c2b63085e225d67841","sha256":"180dfde18da5b77cb518a69d89ce6d6594f1e1acbdcffcbf3cfc0343fd5938fc","sha512":"9cf7f00ad0e55cb19ad8f14cb1e27cc6acffc8cf3877d3f9fb9d1546c78aee8a3a68b6bb05b7d4b6a35b3dd692690834488c9cfdebf9278d6e9090bc4e2c87a8","ssdeep":"","tlshash":"2cc08c0bb071114b0087f005938a08883124400b01390d28368c508a3fb2f8c034e6a8","size":180,"data":"","first_seen":"2026-05-26T00:10:57.605202Z","last_seen":"2026-08-30T04:54:51.796021Z","times_seen":308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"35b727150f72dcb5f53f0604a2622d7e","sha1":"154ea17bbb0c5b231262702a112392609fcf45b5","sha256":"9bf91e73c20f5f1288c6eccf0e2d8a1ae6a36cb3f31d3b9e5deb4f29bbad54e8","sha512":"061cf0afe7af6dcddb5b421ca4ddc7782dd567f78956a58c904348f0fa1256353939662508aa0b1bb17d3f06edcc08e46f5e3cf27952a61c516475bbe0ffaea4","ssdeep":"","tlshash":"1e51dbae527b37702d9392b61b6b2b05323150bb2420ca547eef87548f97d42a0537d3","size":2520,"data":"","first_seen":"2026-06-14T08:01:07.615969Z","last_seen":"2026-08-30T04:48:49.463978Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f83dd5b6691e818d5657486245ae0b7","sha1":"340f17061463f8a0aaac031659b69bdfc0b8869b","sha256":"c6f6c8b1582070e0462dbb6bd7eb147c41ab9fc2da3d3ee61adc6427c3c3837e","sha512":"35b84da00e008e9c18cccccf7ab90de360bcdd25f103925157eb6e4a991db904793ff140ea2b23f3741d10c351d6a968cfe885e4a3281644d9fdb19144e6a96b","ssdeep":"96:aCKu84QWJXDQWHDbHcRnSXBvu96adgMea7piLskym6y0:aCK1QDrH8hC0VhD7piQkym6y0","tlshash":"8d9172291ab114346683617cab279b063b35b103b024cc647fde5794dfcea35a9933da","size":4612,"data":"","first_seen":"2026-08-30T02:17:30.869898Z","last_seen":"2026-08-30T02:51:13.559058Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"47763bd7f2dd1f4382d08390fd57543e","sha1":"02f9384db4fd1fc4fef099f30effdcf8b02ea405","sha256":"1cf5fc2e8152dd9de806c0f5cc4c3c8c643af4e766904af5351130f4803851b9","sha512":"77b376186666c380bccf3334c2ffb50b204ae71534294d2dfc65b9d4d12d1f961df14c14e6359a67b6d2c5d8325d7c6335b24af0a4f7b09d89aa28c0531de57d","ssdeep":"","tlshash":"f9c08c188032a078000a210c8ab92292322041e70e163d24b39d544a0f0aa4f43b929c","size":175,"data":"","first_seen":"2026-05-25T21:59:04.609021Z","last_seen":"2026-08-30T06:25:07.422655Z","times_seen":1403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"31a80376aab84cb48fb58f2a6dda1ce4","sha1":"decf8a3f7630db8487c1bca09c5b281575fc7930","sha256":"91df9c6751ab21caf9f72efd6079d899197d11d6a08459d3c199b38470ae1d42","sha512":"1890ffe19cfee05aa58dc2213da4c4b0db18a6d346a300af95027df1186c214325fd927007cb12dd5fc046451fc1ab4bcb91c92356945b15589bab66c6499b8c","ssdeep":"","tlshash":"1de0269c2a807d32a25256eb50f2de8c34a23038e946a8519d9f88496a18989c82cb68","size":332,"data":"","first_seen":"2026-08-30T02:17:30.878673Z","last_seen":"2026-08-30T02:51:13.562104Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d7147e7ebd2311c07f78c380cfce20e0","sha1":"45e7d917a88258e2e34a662d09a4e4bf0834320b","sha256":"c3d2eda5c7acb9c58b3230c41107acfd5a690c6b8b619e1c713f1d745c928128","sha512":"bbb89494aefdd6cb760db4580d628aa83fdd91fc1fece1d479fa231b452d0577bf391df67470d62a44ee71d57e24a6a59234af9b43d052ddac6f95ab6ea2fde3","ssdeep":"","tlshash":"0dd0c907b571010a049ae009e39a198c7178850b053e0d25768e909a3fb2fac235d5a4","size":219,"data":"","first_seen":"2026-06-28T17:29:36.233619Z","last_seen":"2026-08-30T03:08:29.238155Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78085,"data":"","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-08-30T04:54:51.764102Z","times_seen":3301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-30T06:28:56.754236Z","times_seen":94551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/parallax.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a9a9442f70e0807475a21b835dce50b","sha1":"7b4755ab79dcfbe1aecb13823f78997061fd1b8f","sha256":"fde3fba1a1c3dbae530a58d3a542369cef2e0000685cb299a265e721056d4201","sha512":"20a1dd28d273d407d096be59beb4a92c260791d1cf16019cde84651f22fd69f9a62950dae7addb5f807452a32afaa02b406d72f5d79d43d8caa9716960919cb2","ssdeep":"192:t0PtdiPwbyxVZ8343NiOAZSUa89Fr15FZxY8wb84FxDco+W4+D:t0uPwGLsgNiOAZSIp15FZ68wbZWWl","tlshash":"3d52a8453ae6111502ff73ad609f57087528a232c52ace1f7c3dc2d8a580b8953bb779","size":13302,"data":"","first_seen":"2024-08-29T17:20:29.824917Z","last_seen":"2026-08-30T04:54:51.73492Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/wow.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4b12ef0f7e4bf5d5ff3555d18718cb","sha1":"258fa26dec8fcf4769d49eaca6712ef56923673e","sha256":"3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461","sha512":"40d8f96697d393a5301d2960394cbea52ea64330a8b706a0982e9b17176bfc0d55394dd4f0fbea2cd1798c938e66ccccc671d803b2802f8b37c2c41f40c1200a","ssdeep":"96:xrZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:xry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"17f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","size":8183,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-08-30T04:54:51.777285Z","times_seen":2657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/form-validator.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5cae60d0a59205f9c82928fb16ca1a6","sha1":"c03a6517da694e1ba5aa6b9dc6a647bd119b819a","sha256":"60c23945490cba413f3d6cf2cc57d5c560faeb0cf68ab38daedc80939966b108","sha512":"c43f6e446c89df6fc82c5cecd3b5727bcc226c2826f9ec8e0ac88925ade0bffc212d92759b6c8117d31fa6b032feffe91cb2519318320a16bca2e07d9cd29043","ssdeep":"96:H1MWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:H1MW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c4c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","size":6063,"data":"","first_seen":"2023-03-08T00:47:54Z","last_seen":"2026-08-30T06:28:19.701327Z","times_seen":1087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/meanmenu.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f92bd7e01c33f6a2bd73c5a2833b4874","sha1":"39533bc5c1e8128008023565e03830e00ce17808","sha256":"0927e12f94a642d9bbf07b4204102848162eeecadc02d002ace6fe334315b832","sha512":"e8a7d2768621e01fdf3e45eb187437f7c452f6fafd1d0a48add3844c7d16858ebadaa17f7b7272625f99b8a3f1f4426fab861d62cf1c0656bcca6617a12b344b","ssdeep":"96:cqHVT5bG+ESTXybNrNnaToz99MClbxXvY+CSoGZn7c6BFSEXT:zVT519XyJnl1BCSlZnl9XT","tlshash":"bfc1dd2bb5b044f8a0bb7a61b97af230f4f3660bf146d50131bd64262f31d6015a2fe9","size":6035,"data":"","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.770277Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c93464f4817f6cb0f144b5c8d7dbf2e1","sha1":"e94ce35a3802696b11c6fdf5ecc23ca60d5ef518","sha256":"174e60b062dfa8216d7bd51dc7e665aa6803d29790d90577546d24aa7ddeb426","sha512":"2db7e7332778a946b661dcf0471f8e25d82d23285177771d13babe301ac9036befff0330187ae5ee494b5db5905ec9c060a5f367f86e91d8ed5c4a54af600fc9","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCYGN//h6LiJq:SzP2D2SLi8","tlshash":"41822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-08-28T04:30:07.952053Z","last_seen":"2026-08-30T06:13:39.055858Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44e853f1768c5c42ffba810a8458d285","sha1":"93b2a70e5846076c3401589fd12dd085cb80124c","sha256":"dbd1c14da444268e08c613208fcb6d34b6404434481c43029bd11e3701cd6bf2","sha512":"a3c09e6348aab4d948f6cf8f388de125a1c901bbd53211832ee782d3c3dec7e09e72d82917a987836c5b321aca726bcdaf2e4c7f66875b14fcb3eddde140295c","ssdeep":"1536:BigMvSFu1D6woLGnA2jYDpgaOJDWbaylDluKzWNrHURPkx3uYV5pKYerlSy:47iul4vGiapx3uYV5pwrlSy","tlshash":"b8b3196ef091b43d89939162209f3212f3363d55ad19d0a8f678cef419d89c96127f3e","size":111386,"data":"","first_seen":"2026-08-28T04:30:07.860316Z","last_seen":"2026-08-30T06:13:39.062866Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-30T06:13:39.062373Z","times_seen":50952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/slick.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"cca96dece8c053d46dfa20101388d2d3","sha1":"2c14e299764bcea9dc875e1f2e1a86afc7bc3fcf","sha256":"db5a2153f69965283f3d434959ffbee8dc61514e524fb871c6faac56a1b6f742","sha512":"a2ef71e1187f1aced8be072976d59cd360a4015fabdb3a2bc55d56df4fa06eff59e24aff355dcbf1cea7efe8c49cd3cf760152c40283803f6f08e97c88307815","ssdeep":"768:MjL0ySLGPzYbHpJIkdSAeFr8qGAOxCt/QXlGLAcB68Kmb:UrPzYbVxCt/fB6ri","tlshash":"4033b409a210172658e725f5305bc54c73ffe6ba9a01c1d878e683ca24dd1059fdfbea","size":50674,"data":"","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.787594Z","times_seen":719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/main.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"47bc986391ae43304be7544164cf022d","sha1":"e42afdb45a95bee3a021a79a24bb0357f84b62b8","sha256":"f7f7c12c779f4100a67c0a9c853a1f4a534183c36746df58d358bb5d02e548f8","sha512":"95d746af3aa95c33c01f8ad9e80ba17b7390bae9c4df4c0d2d85762bb84ac18604bfe07eab20d2106486a7a1b26e83c621d84b1d3b7fa0a064ce6d94be6f483b","ssdeep":"96:705I1XuiMlvMsW638DBpUtr+LIZDu7dQzqvcr8r:705I1Xx0tuIZDTA","tlshash":"15c17344714c143dc5fb32a4d139d5098f7d6111e203b2f5f8fe00ac1b686aeb6ba99e","size":5916,"data":"","first_seen":"2024-08-29T17:20:29.828451Z","last_seen":"2026-08-30T04:54:51.771254Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.V9F49gYQNh4.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfqvPQtzWg7haAGZJexD7csmVtnHTg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"332d9b4c47f9d7fa9cdc8076fd90478b","sha1":"87030c5796ebfe7cc18ba7f8eb0554f48676816b","sha256":"49ccb08db0d6ad64bd37a7ef54fe47ea00773b9fac82916a97c619402a3829ae","sha512":"cf41285d105ebbb5ac3df582b6f599fc8aa01f6a19aff2a9af7960e55edb179533afb42bed3186aeeca0c8c0ca13522d979ed7ee77839198f48c1c6747a2d172","ssdeep":"3072:sHC8+pK2udSWfCiuQzNbYHyJ5QQxzJuvEc1ClcHehnRFcmgal9q43:junu+6Qx+CNFW43","tlshash":"0244d8c8b26570a79363f4a5413f040eb13b68a9f9484dacb28dd8e26df4949417bf7c","size":277762,"data":"","first_seen":"2026-08-27T19:41:49.176999Z","last_seen":"2026-08-30T06:28:19.82974Z","times_seen":762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19b29f895ef388f22e5e71e26c17bf67","sha1":"a11b100ed38986ad57aec4bbadd17dcafb97f08d","sha256":"0d2f16541080b8c84b47c7a58a7009855881ab6099a5f2fa9897634086bda9bd","sha512":"d40ab858ec5ecc23714800a3b658cbb2d692079ffacd45b3c49589538cd6ed3416b7f7fda248bc069c083ecf9398c56b6460f80baf10efc1c63a6b6ae5d9f8e9","ssdeep":"192:0H9MaDRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:KDb9HkS316xAFKpLZEh","tlshash":"8d32a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","size":11888,"data":"","first_seen":"2026-08-28T04:30:07.839547Z","last_seen":"2026-08-30T06:05:51.490015Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/jquery.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-08-30T06:28:19.846018Z","times_seen":11194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"efc01f2aded8e7b272ab9f9e1b3ecdb0","sha1":"eef21a57c46361f05c28d0d7b97fdc6530185c17","sha256":"668bfb67cff6b815ff9f9b82e070d4ad8721414bca6f3de21f10fb9f3e5dfa32","sha512":"20e04e83be2dbab7ec9972ac31ba5372fa53d62d046220f93e348c47f1840b636d54d8ca380eb36e7f7445123eec24e1d435fb61928eea259ccf912c5c3e8b08","ssdeep":"768:FCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSRc7UuHjRUQuFBt33:MITMFC4dbMVRSRcgRDV","tlshash":"cf137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7d88c213ffbc","size":44350,"data":"","first_seen":"2023-03-08T07:37:20Z","last_seen":"2026-08-30T04:54:51.732838Z","times_seen":1025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-30T06:13:39.063367Z","times_seen":43404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c374abcbae1ca57d31b890e6f19a09d","sha1":"343bad87410434a1d8d73437f3d8f1bb4f6f1078","sha256":"8fb09b8e956e11ae2fb9ae820667ae73afc448098832b3daa66783b87b049914","sha512":"61e7e3471bb0ddb6039c3963791930c9ac94d8772d36e0b42badf8c7c552dd88511017fbb8841c7040f902747523acb6461c2fbc24507404662d28e5f862017f","ssdeep":"384:Nqw/U5YK8HxhqtThWazJbUZDkM0kWEYPk6c+UtKM5eH:A+hqtThWazJbUZDkM0kWEYPk6c+92eH","tlshash":"2a52d7a7b2a4782d02379752308f3204f33b7d45b215d919f36ddcea4aa88c16056f3e","size":14277,"data":"","first_seen":"2026-08-28T04:30:07.795044Z","last_seen":"2026-08-30T06:13:39.06383Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-30T06:28:56.75524Z","times_seen":68048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"118552dcceb8c578d773bd87574b2593","sha1":"fb6c0a934699c0de85ce84e327af8acba9740d2a","sha256":"24ff096f206600b4628aaeac09a4fe493c7e9fce2d61d5a798f0e98ff0b435ce","sha512":"9c6a31ae9fd2f19d0f0383e304220ff76bb25c04f725cfd35c8341308e1d01bbcb34a77f89941d1438a9c638ef7891eecbee5a9e3c9668c71dadbc7c39935a3c","ssdeep":"","tlshash":"0f41a3d932e4f9a6834318e1043fa016b6353976487be8c0931dd4f9bc78c45821afb2","size":2306,"data":"","first_seen":"2026-08-28T04:30:07.851179Z","last_seen":"2026-08-30T06:28:56.820523Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0054637ef015a3e2249264cc3173aff4","sha1":"a35c4df0a0d102815592c851399ab7cc34d652e0","sha256":"29c7ac60a92bf28f1410ea56241c9079884bbd49c377c00ec05c6fa6bbc73fb1","sha512":"41a3835b184bf9d599400b35261616a1fbbc2a09a75691d36e9919dda98a714023b8d10b69c4d7bf99a88b6d54c537a3d775a76c78caa2ef6f83023f91270b04","ssdeep":"96:zNC9Hqt7pEma7hY/rcK/JBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYtLRIvgx43nVY","tlshash":"deb1859ef247b456c156225150ef3b1df33a281ca61ccdc4a66965f218784cba077b39","size":5261,"data":"","first_seen":"2026-08-28T04:30:07.954031Z","last_seen":"2026-08-30T06:13:39.035675Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","size":302554,"data":"","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-30T03:18:49.645752Z","times_seen":52132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/nice-select.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab62d8a15524602c06b356ae74eea55c","sha1":"ae602ab104a3f8008fbcfd7967cb302dd0681e20","sha256":"cd204d095086d67e207e13bae8ceb3de8759eb9eedcd4080809c929dc7af1065","sha512":"d4798aa79f38cf35ae416780c5d8daf9333ec29440c55d6d9c164aef67cbea21984ee309b756c09628bcf69c52ed29fe5b56ac44b31cccbb78b223ae06c43f95","ssdeep":"","tlshash":"60511114b10512f648ff24d37911b147a075493dc42ac14aa97e86b21dfec02aab6d5f","size":2937,"data":"","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.780871Z","times_seen":610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/contact-form-script.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dc6989850222aee1a68cc132426f035","sha1":"f6a762662c4df511e97df3f0dd730b64aa31cd9d","sha256":"bbe7b53d11fee22a044cff9a34d37fe623ad369becd7a442e3b4f268e5d603d3","sha512":"2d2152378e98221bdf87e05c0d5fb7a97a69a335f565e5ea260dbf893d3bdb4237740a3577b6b3061759c9870b96dd0c875303c8bdb39547b6ac4f7dadc33fd7","ssdeep":"","tlshash":"5741bd08651927c40a333b7de69a9104df611363c505eb553caca9d46fb8f9831a1fbd","size":2144,"data":"","first_seen":"2023-03-10T17:30:02Z","last_seen":"2026-08-30T04:54:51.758151Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cd4b0751d19bf6b2b52619d6ac16faa","sha1":"18e69d00633a61b4c55bb306e0ba73f049bca888","sha256":"91a88fdcad1e40d308bf095f77a36b05ee4f35d10045b0b68849005bc2d7f27a","sha512":"46b3d61b8c1ddf645f783d51b8177e3c0f684216f8fd7de5abb0b29f15de4d179c677d5309f91f07e000a04b85589bccfe587c0b9e4a78911fc127d524eb1349","ssdeep":"","tlshash":"3751e29a98b6d0c6c4836c29dfaf927921040037a825ece57ddcd906ffb050bb64d5d4","size":2990,"data":"","first_seen":"2026-08-30T02:14:59.72563Z","last_seen":"2026-08-30T02:51:13.564234Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd6a1dc367361b46e88438905eba1222","sha1":"8c92d42268d13ced5c98fb839e0d16dd13b6cc36","sha256":"8ba2dae871996fb11fa5b94635e9be6d65ddb35ee9174ab10dec721855d2f7f8","sha512":"941f750b77ddbe68626beb8bd9c22027a4d47f6e048c6600ffc81b9794c7495f40d4578ac15d1257820fbc8b91d0b134c3af6d8ef8aaad347f2c5984af62556c","ssdeep":"3072:A8gYgcvYqhJrTodCWFW1Wx08fMOAUmqCpQio/rtxLMz9gZ1a:5OCWFW1WxVfMOAEuKbLMz9S1a","tlshash":"7634c69df186b47606a37131501f320af23a685ab45ac0d4f636d8e1bd789cea133f79","size":244281,"data":"","first_seen":"2026-08-28T04:30:07.891582Z","last_seen":"2026-08-30T06:28:56.806035Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","size":10918,"data":"","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-30T06:13:39.061911Z","times_seen":15299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/magnific-popup.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-30T05:29:15.275592Z","times_seen":25399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/odometer.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","size":10264,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-08-30T06:28:56.79227Z","times_seen":3538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23138,"data":"","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-08-30T06:25:07.351712Z","times_seen":2653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"[PWA] Service Worker registration failed:ServiceWorker script at https://nexovabank.com/sw.js for scope https://nexovabank.com/ encountered an error during installation.","filename":"https://nexovabank.com/","line_number":1508,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.718Z","timestamp":1788058234718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:50:34 GMT\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64800,"size_decoded":3062,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2b0492055bb5b23c5ed11d557a9c290f","sha1":"26e59353da26632e9cdbddd804cb0f526f53fc00","sha256":"b56d6d4c80db94680717f75c471851d4ec67f81078099e54553046772b0f90a8","sha512":"d86e4e14d6f2cb643dbf842996ab4d78eee181f4fe7d3f0ef292798252541396c6806f76992a772a18258527a5c94e10eb7d802ec3bde489a72bcf50e5ee65c9","ssdeep":"768:yFdF9FAFNFgBFUKF7FnFwJpK5g9UEf7h4YXogEU9SWWjD8TgfUS9hMNtG9g5UoTV:wE9YIWHHIHTxj","tlshash":"83531da1041b5440ab834ce223ce7e35fe0f92547141d075ebfc9b6baedbda6526836c","first_seen":"2026-02-19T22:23:13.630851Z","last_seen":"2026-08-30T06:28:19.688691Z","times_seen":7300,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/animate.min.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.170Z","timestamp":1788058234170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/animate.min.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4829\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71756,"size_decoded":5390,"mime_type":"text/css","magic":"ASCII text, with very long lines (65342), with CRLF line terminators","md5":"b3d5b75898f1ed885c7d2b538faa8b81","sha1":"bc96496831f4df311443b8e3d76cfc17db53a988","sha256":"a61e123314188bd0453320008e01b4bbb665bee09039f4cbd9bef44de410ce67","sha512":"be097927cb6f3c12ee4140a60f11dd56bcb1e8661b35848f25f1ae2417b65190924d73d2d01c04c6763fc2c50d3931cddbc2aa74cd945f84145d3f3fe451f433","ssdeep":"1536:X6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:ykZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"006329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-30T06:25:31.391788Z","times_seen":2916,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/flaticon.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.173Z","timestamp":1788058234173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/flaticon.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 439\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1569,"size_decoded":999,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b685b2dfd3cfb19626146177d1c95e5","sha1":"f195ad890dd1d507d2fab849448e9b737f9d6bbf","sha256":"909efd0a62bbc415e927346844061afdedd751683b6eba7142b1db3bb72ea18c","sha512":"621b491a8b01a066a23630a90ebb71fbaa89c6d10dc9581064a548f82f2c467c5b4a47237a829d4ac375ae049c47f571b96d494124d5fe314f7c565b39189ade","ssdeep":"","tlshash":"4e31e6e9c12e10818712af45e7abb6d0af48b02c99c09d1ae1751d9dfef1e35878279c","first_seen":"2025-04-09T11:54:58.551863Z","last_seen":"2026-08-30T04:54:51.763165Z","times_seen":328,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/slick.min.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.177Z","timestamp":1788058234177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/slick.min.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 726\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1814,"size_decoded":1286,"mime_type":"text/css","magic":"ASCII text, with very long lines (1332), with CRLF line terminators","md5":"e1bb8aca0ada1361d15eac06412538b4","sha1":"51f8be05d8b482766bbe8550181ee66b95a1a10f","sha256":"6c3b07b65a2bae0d0b8430524dbcffac75c20125514b04dbe5ebb48faca4df64","sha512":"9a1120caca16be2f5e6bd422a569e1042b81948f15a36d85fa41508773ff93f938deb8594d1d02b922cf4292378e8a06255a3c3b3b36cbb8683a83154ca9a079","ssdeep":"","tlshash":"8a31eb990056118a4037e7136ae3eb8a39e7f1125c3206c9f75c8715cf8feda1dc25da","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.743417Z","times_seen":710,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/invoicing-image/4.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.425Z","timestamp":1788058234425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/4.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10230\r\ndate: Sun, 30 Aug 2026 02:50:35 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10230,"size_decoded":10728,"mime_type":"image/png","magic":"PNG image data, 265 x 253, 8-bit colormap, non-interlaced","md5":"104d3badf1ad26c48c6dd2979d8311e1","sha1":"914b2a40ec189e760998009d7f9c1925a62c3fbd","sha256":"60f9c169c73ace0533f2d8129220d72e650956ce2486fbaa37e81f2a5e10257b","sha512":"2dc2c8e8fdfb4977d9b7d6fcf2b4e45b5014eb0776c6bd9477b097fa6cbde9e1a555668bb8962484adbea629c077cecf3a4c117fc69972e004013ad93467a3ed","ssdeep":"192:v3AbHQbwHuu2QU3+9vAVi5+2ZZlgOpR/+iJcDK:fAbw0o6IVu+2ZwOX+Ccu","tlshash":"0122c0841dd5bd0b6f1da7b66f635badf3861e980f738fc3fba0193a005018068a75a4","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.747784Z","times_seen":571,"resource_available":false,"data":null}},"time_used":1207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":780,"receive":427,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/storage/app/public/photos/yakKgcHa5Ev1tQM5usauzyerxtJXqPtSeiwSMXoS.jpg","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:35.793Z","timestamp":1788058235793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /storage/app/public/photos/yakKgcHa5Ev1tQM5usauzyerxtJXqPtSeiwSMXoS.jpg HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:35 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 06 Aug 2026 17:41:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22073\r\ndate: Sun, 30 Aug 2026 02:50:35 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22073,"size_decoded":22572,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2026:08:06 18:32:02], baseline, precision 8, 502x340, components 3","md5":"2c8771ceaeb70e2310b378aea46c3d22","sha1":"bace670be487622801c9960353137379a06bb669","sha256":"c51c41f72c357dee0cb1c01ae37e3819bfa8cba870f1871a61adad2f6a7209d4","sha512":"f77c189eed99bd9e6a5934a133acff6422d87c6e34b6c28e9d2e727284cc5fdf7c3812a5739308e42b625297a5c9ecce081684bdc0eac9553f17892156c5ce03","ssdeep":"384:ZCv5HKCJUgzNZkq5fMVoEH+vWdbVyRdwZaOshmzxpgv:6HK2kY2p+vWdJawx1U","tlshash":"87a2c026cf040d20d427073b3ba6fa156118b90a5fede34053c25ccb9e5fe98596be97","first_seen":"2026-08-30T02:17:30.033981Z","last_seen":"2026-08-30T02:51:13.43828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/storage/app/public/photos/QWUXGCs8LBUOPQduR7qXdREh2ESZq3U8Ssqpi2TJ.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:35.795Z","timestamp":1788058235795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /storage/app/public/photos/QWUXGCs8LBUOPQduR7qXdREh2ESZq3U8Ssqpi2TJ.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 05 Aug 2026 21:51:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15115\r\ndate: Sun, 30 Aug 2026 02:50:35 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15115,"size_decoded":15613,"mime_type":"image/png","magic":"PNG image data, 324 x 365, 8-bit/color RGBA, non-interlaced","md5":"e00aa43e23237ff452de6e852a052c53","sha1":"37204cc13867740f9e2e5c1ca18af7d8a17c8bec","sha256":"65f8da1e167531295b0a395f39da435a3329c0c143454b53d9bc3383e7567531","sha512":"9012609f9e0ece66d2f0ae0cb7435bd76c5a091fdef766d04dc3fa381617ac56d7e213973b16205fc60dc73b8bd486ace47bdac54600c6baac9bd243aa15b8bc","ssdeep":"192:hUeaXS3blEggPLe8+B82gq6a28qg8pqAgR5EB/wCGQOP8ZlKJEBDJxhb5942I+Qp:Gel3blKdbP8vs2irJZ42Ji","tlshash":"cb62bf9889cd77c3a81ffe7e3f236744041a87a741444ac38fc352b26d9c546ac92a8f","first_seen":"2026-08-30T02:17:30.834469Z","last_seen":"2026-08-30T02:51:13.442959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6a743e9a9457901d462198d6\u0026widgetId=1jvb193iq\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.250Z","timestamp":1788058236250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6a743e9a9457901d462198d6\u0026widgetId=1jvb193iq\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-6xrm\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-3-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: a3307d289a315685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3201,"size_decoded":1969,"mime_type":"application/json","magic":"JSON text data","md5":"75b9c2fca4bdc07339f1dfd511a019d2","sha1":"49bd2c04df9e02dd74affee5e47aeef537a9d2ef","sha256":"14db280a6458dbb3da92b8fb76b4d00818cd1e62d433a4c7ee0e62abd0a395bd","sha512":"884827ccb13768663fb2d716fbf9bbff32b2bf406219d000c606ce966bfb0dac4485e5790b465a3b75fccf1b35e5b2903372ce58064d23b93d328a47106cc488","ssdeep":"","tlshash":"6361332a8d15dd7963c9d343a1de3627a93dd033e384591de098ad3883efacc221274b","first_seen":"2026-08-30T02:17:30.258053Z","last_seen":"2026-08-30T02:51:13.446618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":4,"dns":3,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/magnific-popup.min.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.175Z","timestamp":1788058234175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/magnific-popup.min.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1410\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5259,"size_decoded":1971,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-08-30T05:22:56.312496Z","times_seen":5476,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/style.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.188Z","timestamp":1788058234188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/style.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16864\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":155715,"size_decoded":17426,"mime_type":"text/css","magic":"ASCII text","md5":"2f48d50b42acdcffe5d9e5fd20b7237c","sha1":"ba0cb591de881029a3a36f0630b5133dfd90ccac","sha256":"4655f9d69b73295f521d26f7339aa565b0d235304823c167efb7d624d22047c8","sha512":"32559c77b3f9d5104f47e9a7bca65845476d725951ef54c603ee8daa9ffbb5a444c5c0afd826b57e610d64f8c14bc3ef3ad5637e986207559af340b8d05da783","ssdeep":"3072:m2KQRe5PUk06PSEnZB8BcgSS3ZQhqLpDpViAnL2Moc2S0YWHZj5JOQ9ZBbqcVNyA:iIe5Pf06VWc+3ZztFL2MP2PlHZmQ9PFH","tlshash":"4ce385d55ba52144364f90a829e5eb142fad50c3ea4fcdb97af3604cbf843881167f1e","first_seen":"2025-03-07T12:16:50.182098Z","last_seen":"2026-08-30T04:54:42.420174Z","times_seen":313,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.384Z","timestamp":1788058234384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1622\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/slick.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.393Z","timestamp":1788058234393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/slick.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10883\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50674,"size_decoded":11432,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2614), with CRLF line terminators","md5":"cca96dece8c053d46dfa20101388d2d3","sha1":"2c14e299764bcea9dc875e1f2e1a86afc7bc3fcf","sha256":"db5a2153f69965283f3d434959ffbee8dc61514e524fb871c6faac56a1b6f742","sha512":"a2ef71e1187f1aced8be072976d59cd360a4015fabdb3a2bc55d56df4fa06eff59e24aff355dcbf1cea7efe8c49cd3cf760152c40283803f6f08e97c88307815","ssdeep":"768:MjL0ySLGPzYbHpJIkdSAeFr8qGAOxCt/QXlGLAcB68Kmb:UrPzYbVxCt/fB6ri","tlshash":"4033b409a210172658e725f5305bc54c73ffe6ba9a01c1d878e683ca24dd1059fdfbea","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.787594Z","times_seen":719,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.808Z","timestamp":1788058234808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 05:14:37 GMT\r\nexpires: Fri, 27 Aug 2027 05:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 250557\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-30T06:25:18.682343Z","times_seen":34915,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":43,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJX1C1GDNNQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.830Z","timestamp":1788058234830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJX1C1GDNNQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25540\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:40:43 GMT\r\nexpires: Fri, 27 Aug 2027 10:40:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 230991\r\nlast-modified: Tue, 24 May 2022 18:29:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25540,"size_decoded":26353,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25540, version 1.0","md5":"19ab149056827f64d640fa3d65f4e536","sha1":"754c09533c5b386067e762ae85f39c345ec10915","sha256":"60b9b9640fc716abd752df41f38ad81052f4905e42be2ff3c1f78e851863aee0","sha512":"e382cfcf784ef72503ccd007642f5b3e285de7b5515cd76457855896034b7ee26908a1f491527b9fe7a603a6627fb3db0fc9618cdbd52724b8f4d309f7de33d1","ssdeep":"768:whjhD1rmXBpEcXoaazQAU5L9lg+Atku/N4XyJVa:kFOvEcXNa0A6c3tk47a","tlshash":"08b2f18a2721ef2cc94dc5a65b0b056fe58afe6e44d15cde481fb3aa430430ec2afd54","first_seen":"2023-05-01T23:05:16Z","last_seen":"2026-08-30T04:54:51.757387Z","times_seen":2254,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":36,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.260Z","timestamp":1788058236260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2027\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d28aa335685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":4369,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-30T06:28:56.795557Z","times_seen":30345,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.948Z","timestamp":1788058236948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166981\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-ray: a3307d2ce9d149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5504,"size_decoded":2976,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-30T06:13:39.063367Z","times_seen":43404,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/main.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.402Z","timestamp":1788058234402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/main.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1962\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5916,"size_decoded":2510,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"47bc986391ae43304be7544164cf022d","sha1":"e42afdb45a95bee3a021a79a24bb0357f84b62b8","sha256":"f7f7c12c779f4100a67c0a9c853a1f4a534183c36746df58d358bb5d02e548f8","sha512":"95d746af3aa95c33c01f8ad9e80ba17b7390bae9c4df4c0d2d85762bb84ac18604bfe07eab20d2106486a7a1b26e83c621d84b1d3b7fa0a064ce6d94be6f483b","ssdeep":"96:705I1XuiMlvMsW638DBpUtr+LIZDu7dQzqvcr8r:705I1Xx0tuIZDTA","tlshash":"15c17344714c143dc5fb32a4d139d5098f7d6111e203b2f5f8fe00ac1b686aeb6ba99e","first_seen":"2024-08-29T17:20:29.828451Z","last_seen":"2026-08-30T04:54:51.771254Z","times_seen":337,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/1.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.419Z","timestamp":1788058234419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/1.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26015\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26015,"size_decoded":26513,"mime_type":"image/png","magic":"PNG image data, 643 x 549, 8-bit colormap, non-interlaced","md5":"ed658f5b5db3a2af058849799dc5d7fb","sha1":"9ebeab3076cd153296cf536941d817ef4bd347f1","sha256":"547a51b8e826dcfb618037d9ae63cd7dccc1b27a42931a60bb97ebd35f30557a","sha512":"f4e4ea1a7a5a932d1999bd9bc77c29a6a82a55518892363a1349ae1d8c865bc2533eb51753995303228f2db96ec7ad112562518a8bb939d8e210a79244e9ca58","ssdeep":"384:HjVdAf1VzD2WmCnGttPgZUEiCJG4pbP2Huu9P2qDBRlgLGble/OKYkRXm1:5e95C4ZUEiaG4FxqD/0Ale//ho","tlshash":"81c2f1833b93df03d53112e15fc0ae6b5783ee114e638848fb654509515c6fa5be0e27","first_seen":"2023-11-18T02:28:27Z","last_seen":"2026-08-30T04:54:51.792269Z","times_seen":331,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1142,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.942Z","timestamp":1788058236942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"8c2091a992e4303600967e53388cb5c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166981\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-ray: a3307d2ce9ce49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10918,"size_decoded":3755,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10918), with no line terminators","md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-30T06:13:39.061911Z","times_seen":15299,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.943Z","timestamp":1788058236943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"c93464f4817f6cb0f144b5c8d7dbf2e1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166981\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2ce9cf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18392,"size_decoded":5826,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"c93464f4817f6cb0f144b5c8d7dbf2e1","sha1":"e94ce35a3802696b11c6fdf5ecc23ca60d5ef518","sha256":"174e60b062dfa8216d7bd51dc7e665aa6803d29790d90577546d24aa7ddeb426","sha512":"2db7e7332778a946b661dcf0471f8e25d82d23285177771d13babe301ac9036befff0330187ae5ee494b5db5905ec9c060a5f367f86e91d8ed5c4a54af600fc9","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCYGN//h6LiJq:SzP2D2SLi8","tlshash":"41822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-08-28T04:30:07.952053Z","last_seen":"2026-08-30T06:13:39.055858Z","times_seen":124,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.950Z","timestamp":1788058236950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"2c374abcbae1ca57d31b890e6f19a09d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166981\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2cf9d249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14277,"size_decoded":5536,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14277), with no line terminators","md5":"2c374abcbae1ca57d31b890e6f19a09d","sha1":"343bad87410434a1d8d73437f3d8f1bb4f6f1078","sha256":"8fb09b8e956e11ae2fb9ae820667ae73afc448098832b3daa66783b87b049914","sha512":"61e7e3471bb0ddb6039c3963791930c9ac94d8772d36e0b42badf8c7c552dd88511017fbb8841c7040f902747523acb6461c2fbc24507404662d28e5f862017f","ssdeep":"384:Nqw/U5YK8HxhqtThWazJbUZDkM0kWEYPk6c+UtKM5eH:A+hqtThWazJbUZDkM0kWEYPk6c+92eH","tlshash":"2a52d7a7b2a4782d02379752308f3204f33b7d45b215d919f36ddcea4aa88c16056f3e","first_seen":"2026-08-28T04:30:07.795044Z","last_seen":"2026-08-30T06:13:39.06383Z","times_seen":120,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:37.079Z","timestamp":1788058237079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: W/\"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2516019\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=5,i\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2dc9e149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22356,"size_decoded":7331,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-08-30T06:05:51.432697Z","times_seen":40170,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/owl.theme.default.min.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.181Z","timestamp":1788058234181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.theme.default.min.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 376\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1019,"size_decoded":936,"mime_type":"text/css","magic":"ASCII text, with very long lines (847), with CRLF line terminators","md5":"f13c9109b79ef93c06e22c3542625b72","sha1":"424a8746184ae7d2be69197cfd9b3c4032238837","sha256":"33dbcf6a027199fab7bca71ce31c80154051a658f69ef98e7ddad581fefae1aa","sha512":"7cd94029c79a246846c89dfa82244334fbe284d86863989d69dd96d54f9d9c33231d8048f647a7a9c94810ea8b618314dd579a528ae2f9461f290490434a10c4","ssdeep":"","tlshash":"5b11abc5b189221d3023c18046a842cb6b1e687e529d1af5f8ee9120c32dd053a6f7f9","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.751258Z","times_seen":1054,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/meanmenu.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.185Z","timestamp":1788058234185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/meanmenu.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 808\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3151,"size_decoded":1368,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93fae0ffb1b096b0233875f166557866","sha1":"f49ed4ded57ffc6bdef92496e2a6e35cc77a2c71","sha256":"3886b107ba24c98a804e32fc22b2751b84e0b40acdf33a32142902ce076fc045","sha512":"61174a758227ac8950578feacfbd6906b1dd1c8981585800b4b98cf27d08f8929461207428576479fbc445925b57baaff3fab18a92d86f493dcfc2969727de51","ssdeep":"","tlshash":"cb51ac54da7b1099fbab967ce671d3287ee4b05baf0fc1acb4fce520c28435824611c9","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.74458Z","times_seen":607,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.802Z","timestamp":1788058234802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 05:14:37 GMT\r\nexpires: Fri, 27 Aug 2027 05:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 250557\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-30T06:25:18.682343Z","times_seen":34915,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":4,"connect":33,"send":0,"wait":20,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6a743e9a9457901d462198d6/1jvb193iq","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:35.313Z","timestamp":1788058235313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /6a743e9a9457901d462198d6/1jvb193iq HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6a910db6dca\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 30 Aug 2026 02:50:35 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2028\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d22da165685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":1228,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"ed5b6be68ffbed03cda250ddedf0d8d5","sha1":"5b01808a63b6f85c7b2633b9e432b7447ed880e4","sha256":"b7dd283f39bc7732bf4c1746b3d8316cfceda7101869bd1451c1478a72051e0f","sha512":"2bd95486839ff2834bf066cace261db930dad1243779fca6e120da68d7dfce54737817bb9b01f62fe1c09e87e5fcc03eec047fd65ec4e660c18a42ea125bcf17","ssdeep":"","tlshash":"8941a9da5b4e5852932810e80caebd0e747b32e789b85c93870c04267a65fbd27c9d28","first_seen":"2026-08-30T02:17:30.740865Z","last_seen":"2026-08-30T02:51:13.474004Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":4,"connect":11,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:38.368Z","timestamp":1788058238368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a910db6dca/css/message-preview.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:38 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2028\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d35ca755685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93868,"size_decoded":94439,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-30T06:05:51.427757Z","times_seen":36662,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/bootstrap.min.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.169Z","timestamp":1788058234169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21195\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163862,"size_decoded":21757,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators","md5":"64bb2b5bc1d4ce1f2b73f49200e022d6","sha1":"4a25df2c842d0f4f038f29377b635184569e2313","sha256":"cb8e6f9631be048c0e0cac4d93fca3931f0aa2c4d6e5c83a2c22b667ed0f093b","sha512":"1660678a126d2b52787a138f99b667f0b6a4cde8de2711a7e11cebdab39956320afcf2a9a17d91c0096a37d43c9da864915cd6e422150a64f42367a695af6ed8","ssdeep":"1536:lt04T8if0W8DsEBpy0cuJBt2rIWE5e0VUpz600I4fT:lt04P0VUpz600I4fT","tlshash":"98f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.784939Z","times_seen":580,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/storage/app/public/photos/yakKgcHa5Ev1tQM5usauzyerxtJXqPtSeiwSMXoS.jpg","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.414Z","timestamp":1788058234414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /storage/app/public/photos/yakKgcHa5Ev1tQM5usauzyerxtJXqPtSeiwSMXoS.jpg HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 06 Aug 2026 17:41:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22073\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22073,"size_decoded":22572,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2026:08:06 18:32:02], baseline, precision 8, 502x340, components 3","md5":"2c8771ceaeb70e2310b378aea46c3d22","sha1":"bace670be487622801c9960353137379a06bb669","sha256":"c51c41f72c357dee0cb1c01ae37e3819bfa8cba870f1871a61adad2f6a7209d4","sha512":"f77c189eed99bd9e6a5934a133acff6422d87c6e34b6c28e9d2e727284cc5fdf7c3812a5739308e42b625297a5c9ecce081684bdc0eac9553f17892156c5ce03","ssdeep":"384:ZCv5HKCJUgzNZkq5fMVoEH+vWdbVyRdwZaOshmzxpgv:6HK2kY2p+vWdJawx1U","tlshash":"87a2c026cf040d20d427073b3ba6fa156118b90a5fede34053c25ccb9e5fe98596be97","first_seen":"2026-08-30T02:17:30.033981Z","last_seen":"2026-08-30T02:51:13.43828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":887,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.831Z","timestamp":1788058234831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:06 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nage: 317968\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-30T06:27:12.519342Z","times_seen":64937,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":29,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.124Z","timestamp":1788058236124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"118552dcceb8c578d773bd87574b2593\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2028\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d27ca2c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":1760,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"118552dcceb8c578d773bd87574b2593","sha1":"fb6c0a934699c0de85ce84e327af8acba9740d2a","sha256":"24ff096f206600b4628aaeac09a4fe493c7e9fce2d61d5a798f0e98ff0b435ce","sha512":"9c6a31ae9fd2f19d0f0383e304220ff76bb25c04f725cfd35c8341308e1d01bbcb34a77f89941d1438a9c638ef7891eecbee5a9e3c9668c71dadbc7c39935a3c","ssdeep":"","tlshash":"0f41a3d932e4f9a6834318e1043fa016b6353976487be8c0931dd4f9bc78c45821afb2","first_seen":"2026-08-28T04:30:07.851179Z","last_seen":"2026-08-30T06:28:56.820523Z","times_seen":142,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:37.020Z","timestamp":1788058237020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 04:25:59 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166978\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2d69db49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19329,"size_decoded":4800,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-30T06:13:39.036274Z","times_seen":39854,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/contact-form-script.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.401Z","timestamp":1788058234401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/contact-form-script.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 674\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2144,"size_decoded":1221,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3dc6989850222aee1a68cc132426f035","sha1":"f6a762662c4df511e97df3f0dd730b64aa31cd9d","sha256":"bbe7b53d11fee22a044cff9a34d37fe623ad369becd7a442e3b4f268e5d603d3","sha512":"2d2152378e98221bdf87e05c0d5fb7a97a69a335f565e5ea260dbf893d3bdb4237740a3577b6b3061759c9870b96dd0c875303c8bdb39547b6ac4f7dadc33fd7","ssdeep":"","tlshash":"5741bd08651927c40a333b7de69a9104df611363c505eb553caca9d46fb8f9831a1fbd","first_seen":"2023-03-10T17:30:02Z","last_seen":"2026-08-30T04:54:51.758151Z","times_seen":351,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/circle.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.420Z","timestamp":1788058234420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/circle.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20034\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20034,"size_decoded":20532,"mime_type":"image/png","magic":"PNG image data, 524 x 518, 8-bit/color RGBA, non-interlaced","md5":"8e2818145ab7c6ee51794f7dd8b04571","sha1":"8ebb84901bfd3f14211b294bb7667d655204ec14","sha256":"0b76fd0f9811d84c01404d74bb7097e9b908a06af22c37cc6e2973af4170760e","sha512":"3835d6a00544133a076cfbfdb93fae45413d32f26153ad260f5ac0b57d98d6e67bfc336a7b189710df639d366211933bad4b9a61d2cc024e1c421c79711fd834","ssdeep":"384:rUuqhYKe9wW7tacqD3dvFfBoXeQMAXdemlISxgNuyca:rUuquLacqRjoXeGekIegrv","tlshash":"3292d0aee5bc5f2bc7a4fb77b461a81848311b0c53167d71d93abae049db39c4185ec0","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.729203Z","times_seen":575,"resource_available":false,"data":null}},"time_used":1183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":672,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/main-mobile.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.438Z","timestamp":1788058234438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/main-mobile.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55689\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55689,"size_decoded":56187,"mime_type":"image/png","magic":"PNG image data, 549 x 541, 8-bit colormap, non-interlaced","md5":"c59a7bff6b59e7c447efa275cee75f4c","sha1":"677b86ed85ef05bfe71d23ad2ad9f8b7cdb2e761","sha256":"b3fa0e45d454ad8b4f6efec14c2861d78948bc0319754e53148362f7ee5b66a2","sha512":"30c157ac5eeba634395ac39d29934196ffdf795614aefaa1b82d80008303a558da569ad6e010ac736c7187ea054cb5dee379ec515a76665cf578143396f27bd8","ssdeep":"1536:RtdyITWfgPk+OXmOz0Ya6PqM3i43qEfoQCadXz08nAC0F:RbWYPJqmo0j6Pxh6Efeahr8","tlshash":"ab4302a8c9f53da4e3188505001fde329759229bf1df7b10e1d9631a982e2aabc4f5c3","first_seen":"2024-08-29T11:46:34Z","last_seen":"2026-08-30T04:54:51.753325Z","times_seen":352,"resource_available":false,"data":null}},"time_used":1286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":617,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/magnific-popup.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.394Z","timestamp":1788058234394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/magnific-popup.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7046\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20219,"size_decoded":7594,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-30T05:29:15.275592Z","times_seen":25399,"resource_available":true,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/invoicing-image/main-pic.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.426Z","timestamp":1788058234426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/main-pic.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43385\r\ndate: Sun, 30 Aug 2026 02:50:35 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43385,"size_decoded":43883,"mime_type":"image/png","magic":"PNG image data, 759 x 448, 8-bit colormap, non-interlaced","md5":"b506da360c46df01896073b735a5cfd4","sha1":"7ecf08e945d651a426001226de42030a59ddf94b","sha256":"4d70e9862aff6ac84d0732146c9afc39bc4f9f6f4226fe11541e326f1ca51852","sha512":"d66654b11ff53a0d35b0313877443b8acd02cb1649ec4edc694913c334aa4901d257899d616bd6b834bff3c0c97a10c074f66701f0dc362499b8cfaea9a08b24","ssdeep":"768:llcZk/3MZthb8PY9aOKX4pIdQfKE6riKWtG8eYPXFTQLkH21vKSCmKnlTXq:vcZLthb8KaLo47HrjWw8XeIKKSCblbq","tlshash":"5613f1fe387438f8de51f0f1db320835b48a1df07aa1a77849ad7985b22d5618ee2057","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.752645Z","times_seen":558,"resource_available":false,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":799,"receive":421,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.113Z","timestamp":1788058236113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2028\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d27ba295685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":32879,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-30T06:28:56.75524Z","times_seen":68048,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.121Z","timestamp":1788058236121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"2fecc9d90ae6ad7f85d676e274e5d4a5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2028\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d27ca2a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":348923,"size_decoded":117195,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-30T06:28:56.834298Z","times_seen":11252,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.126Z","timestamp":1788058236126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2028\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a3307d27ca2d5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":681,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-30T06:28:56.800422Z","times_seen":94577,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.264Z","timestamp":1788058236264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-5r1z\r\naccess-control-allow-origin: https://nexovabank.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d28aa355685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":712,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.958Z","timestamp":1788058236958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"0054637ef015a3e2249264cc3173aff4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166980\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2cf9d649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5261,"size_decoded":2632,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"0054637ef015a3e2249264cc3173aff4","sha1":"a35c4df0a0d102815592c851399ab7cc34d652e0","sha256":"29c7ac60a92bf28f1410ea56241c9079884bbd49c377c00ec05c6fa6bbc73fb1","sha512":"41a3835b184bf9d599400b35261616a1fbbc2a09a75691d36e9919dda98a714023b8d10b69c4d7bf99a88b6d54c537a3d775a76c78caa2ef6f83023f91270b04","ssdeep":"96:zNC9Hqt7pEma7hY/rcK/JBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYtLRIvgx43nVY","tlshash":"deb1859ef247b456c156225150ef3b1df33a281ca61ccdc4a66965f218784cba077b39","first_seen":"2026-08-28T04:30:07.954031Z","last_seen":"2026-08-30T06:13:39.035675Z","times_seen":121,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-30T02:50:32.738Z","timestamp":1788058232738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; expires=Sat, 21-Nov-2026 10:50:33 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nnexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D; expires=Sat, 21-Nov-2026 10:50:33 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 15547\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 30 Aug 2026 02:50:33 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-11-21T10:50:33Z","raw_expires":"Sat, 21-Nov-2026 10:50:33 GMT","max_age":7200000,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; expires=Sat, 21-Nov-2026 10:50:33 GMT; Max-Age=7200000; path=/; samesite=lax; secure"},{"name":"nexovabank_session","value":"eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-11-21T10:50:33Z","raw_expires":"Sat, 21-Nov-2026 10:50:33 GMT","max_age":7200000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D; expires=Sat, 21-Nov-2026 10:50:33 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":106254,"size_decoded":17088,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (379), with CRLF line terminators","md5":"3e6546b9cfb7aac7880f5190567342be","sha1":"59758c03a8e5934eeb999d8e8b30c7a6da9764d0","sha256":"bdbad6ef615270c224243501dd58f1582a1a0a71330ccc22f07c8933a7489453","sha512":"d3963e79335546840983f25b6beeae05c64a9549ee78b9d0030582acc0359adfcfa0d10a8b33a36e3a858a7d453acec20f269c2225c6432e98786d3329d52fa5","ssdeep":"1536:hqFgpPMFEPX63cftjJ42jlbK3hFm7Ep/9GZQqe76Aj/xm3Z11m:hfQj09m","tlshash":"bea3751441c0110551b3d290fe629b49ff748107c34b856c77ef3aa7afbe9688a77ba8","first_seen":"2026-08-30T02:17:30.77311Z","last_seen":"2026-08-30T02:51:13.50956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1223,"timings":{"blocked":-1,"dns":3,"connect":251,"send":0,"wait":712,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/nice-select.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.176Z","timestamp":1788058234176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/nice-select.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 864\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3185,"size_decoded":1424,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (3070), with CRLF line terminators","md5":"573b75cc4e984f9fd2d7f0bfdef2eed4","sha1":"318d8e184c0b00ea15e324fd3b564ea7912cd7b8","sha256":"d8ba2f0d8e2516ee382a764e506ab91b4b1b02c8078bac475b10aa2d83494529","sha512":"47a28314bf50043971d2d62fadf7c1478cf2195b0c4dcee1e7417cd078bcb97b4bf9f125ffccbfd73cee763ecbdd0cc79281ff488a058b760b413e58fe052f5c","ssdeep":"","tlshash":"cd610f35d551216ff07fca3bbec53b68243dd20368324a9ef244ea07834a16998ce70b","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.754808Z","times_seen":585,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/invoicing-image/1.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.421Z","timestamp":1788058234421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/1.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25043\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25043,"size_decoded":25541,"mime_type":"image/png","magic":"PNG image data, 682 x 448, 8-bit colormap, non-interlaced","md5":"c393722b7042005b24b5124981fa52fb","sha1":"c4faa75b0358dc94de84fe1e152c1100a15794c1","sha256":"a2592be1c2009912e7b17b4d1a5022ded8c2237ec22d9fc381d307098808af9e","sha512":"1c62546d8d8bdfb9035ca3e8758e2c382dfdba79a7aad75775abd5a126d369f5943a07e72adb8738f6676986a388ae4add17e6c44104a795c28ae820cad5a808","ssdeep":"384:xmvay2u7wM9bFIPgNkV4BIzKqKRHArznOOC2sZ8K1uteVC4mN:xm/rUkkaB4zlf+CK1uJ4A","tlshash":"3eb2e16f8a62861cfad54caf103db256e4f4ed292cd4e42fa92d5445e3f62b080627d4","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.761123Z","times_seen":558,"resource_available":false,"data":null}},"time_used":1201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1180,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:35.914Z","timestamp":1788058235914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BECAAQ/d=0/rs=AN8SPfrzHf-2T7wal-G0YeaqSuEl3yfBrA/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 15:12:34 GMT\r\nexpires: Fri, 27 Aug 2027 15:12:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 214681\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4819,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-08-30T06:17:05.088776Z","times_seen":37336,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":18,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:37.035Z","timestamp":1788058237035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 04:25:59 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166980\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2d79dd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54016,"size_decoded":12896,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-30T06:13:39.031216Z","times_seen":35017,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728=","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:37.085Z","timestamp":1788058237085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/assets/fonts/tawk-font-icon-3.woff?55755728= HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6a910db6dca/css/bubble-widget.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:37 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 23 Apr 2025 10:39:13 GMT\r\netag: \"07d578c95ece55d04d46b095fa8ab50a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2027\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2dca4e5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93868\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93868,"size_decoded":94439,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 93868, version 1.0","md5":"07d578c95ece55d04d46b095fa8ab50a","sha1":"2d7b26de9cdc4b40d467186de2073e3dd7804ae6","sha256":"4326543bece14c56ef8ba2534fdb356452cb0650bcded3521cb8b09a9b03bd12","sha512":"89124c4f86613c63f43940a6f1914c1eee5ed90129e6aaa2c16ce446fa10581d389f7c77a579da2270125bce585efa07bf4b3e0880d283795dba42ddd9c7b0cc","ssdeep":"1536:daI2Ltj6D4Han3AHZy92Nzi2tcw52LHqH:2N6E6nOM2Nzi2t55gK","tlshash":"b393e7171706ef8fd42589bb684280734de2e901672ee243398b4d15961eaf44ef87bf","first_seen":"2025-04-29T12:23:34.02726Z","last_seen":"2026-08-30T06:05:51.427757Z","times_seen":36662,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/odometer.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.395Z","timestamp":1788058234395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/odometer.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3453\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10264,"size_decoded":4001,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241), with CRLF line terminators","md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-08-30T06:28:56.79227Z","times_seen":3538,"resource_available":true,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/parallax.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.398Z","timestamp":1788058234398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/parallax.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3805\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13302,"size_decoded":4353,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (611), with CRLF line terminators","md5":"9a9a9442f70e0807475a21b835dce50b","sha1":"7b4755ab79dcfbe1aecb13823f78997061fd1b8f","sha256":"fde3fba1a1c3dbae530a58d3a542369cef2e0000685cb299a265e721056d4201","sha512":"20a1dd28d273d407d096be59beb4a92c260791d1cf16019cde84651f22fd69f9a62950dae7addb5f807452a32afaa02b406d72f5d79d43d8caa9716960919cb2","ssdeep":"192:t0PtdiPwbyxVZ8343NiOAZSUa89Fr15FZxY8wb84FxDco+W4+D:t0uPwGLsgNiOAZSIp15FZ68wbZWWl","tlshash":"3d52a8453ae6111502ff73ad609f57087528a232c52ace1f7c3dc2d8a580b8953bb779","first_seen":"2024-08-29T17:20:29.824917Z","last_seen":"2026-08-30T04:54:51.73492Z","times_seen":367,"resource_available":true,"data":null}},"time_used":900,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":894,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/form-validator.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.400Z","timestamp":1788058234400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/form-validator.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1913\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6063,"size_decoded":2461,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5862), with CRLF line terminators","md5":"a5cae60d0a59205f9c82928fb16ca1a6","sha1":"c03a6517da694e1ba5aa6b9dc6a647bd119b819a","sha256":"60c23945490cba413f3d6cf2cc57d5c560faeb0cf68ab38daedc80939966b108","sha512":"c43f6e446c89df6fc82c5cecd3b5727bcc226c2826f9ec8e0ac88925ade0bffc212d92759b6c8117d31fa6b032feffe91cb2519318320a16bca2e07d9cd29043","ssdeep":"96:H1MWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:H1MW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c4c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","first_seen":"2023-03-08T00:47:54Z","last_seen":"2026-08-30T06:28:19.701327Z","times_seen":1087,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/dark-style.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.190Z","timestamp":1788058234190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/dark-style.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2558\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38764,"size_decoded":3119,"mime_type":"text/css","magic":"ASCII text, with very long lines (1191)","md5":"8c1ac4fa64c95a86f75e12ed2d732159","sha1":"7ebcbde56a39fae94bb808f1fdae5c0fa6348539","sha256":"193fd9dfc7b3b076646a4efbf74285486c93cc56f7b1f48ab083ff11400ecee6","sha512":"c3931898c92663a481cb0dc0fa8f2386288bcdd96ce0fb96198c872a64c7c9baf576efe6594b2510c2a2a6fcfe2c4b08c50c09fa24c1e7de50d3767447643a81","ssdeep":"768:JHYmOwoL86Kn4GurcaqHYmOL86Kn4GurcaqI0oUIvkxvXpBANLbERP3gtr7kxvX7:JHYmOwoL86Kn4GurcaqHYmOL86Kn4GuU","tlshash":"0e03168599fbad5015d3041c79c8ce601ffa62d0572cf3bf793781acaa8660c12baf59","first_seen":"2025-03-07T12:16:50.258205Z","last_seen":"2026-08-30T04:54:42.429658Z","times_seen":326,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/nice-select.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.391Z","timestamp":1788058234391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/nice-select.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 931\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2937,"size_decoded":1478,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822), with CRLF line terminators","md5":"ab62d8a15524602c06b356ae74eea55c","sha1":"ae602ab104a3f8008fbcfd7967cb302dd0681e20","sha256":"cd204d095086d67e207e13bae8ceb3de8759eb9eedcd4080809c929dc7af1065","sha512":"d4798aa79f38cf35ae416780c5d8daf9333ec29440c55d6d9c164aef67cbea21984ee309b756c09628bcf69c52ed29fe5b56ac44b31cccbb78b223ae06c43f95","ssdeep":"","tlshash":"60511114b10512f648ff24d37911b147a075493dc42ac14aa97e86b21dfec02aab6d5f","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.780871Z","times_seen":610,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.403Z","timestamp":1788058234403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Aug 2026 22:34:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 26 Aug 2027 15:24:19 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BjtEho3QgSIoUsIHyhMbIfODGi6pa%2FtvbjrQMEf7HL0ej%2BucIVnN3kUtPUsA%2FRwScKwXQTPVnZQUUt2G2IgjufeAgeQ5GNRkkcRyUffbu8lThsYuXU8Dm6nplH6%2FvIywJDo0IA%3D%3D\"}]}\r\nage: 300374\r\ncf-cache-status: HIT\r\netag: W/\"6a8780ea-5a62\"\r\ncontent-encoding: br\r\ncf-ray: a3307d1d2cfab4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23138,"size_decoded":7506,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-08-30T06:25:07.351712Z","times_seen":2653,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":4,"connect":3,"send":0,"wait":11,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/mobile-app2.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.436Z","timestamp":1788058234436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/mobile-app2.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35393\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35393,"size_decoded":35891,"mime_type":"image/png","magic":"PNG image data, 315 x 507, 8-bit colormap, non-interlaced","md5":"e26bba463d260e078ac8629c81b0880d","sha1":"b1193b6a599af24e147823b8937032c7f58945aa","sha256":"00b9f3ded7bd55a409b41a1d92ee4cd67bf765a665442de53065675ca575e0fa","sha512":"4ed8eccac70c37f73e12010bda61dfed74d842e51c5c660648388ee085dc796e7768117c9049d1e076bfc913331ee2aaa29ae68422816e189a360121c00ce2d1","ssdeep":"768:lyvgW+RPOTm9mw/xJme5brdAK2v1TD6HnZ1CxYBaax+kV4RXXrWS:QKS6/GeJdC21CxYBVSV","tlshash":"bdf2f2c702291c89307d7eebb3e73760252a9a8c5de29de010b383d1ee155a834592e7","first_seen":"2024-08-29T11:46:34Z","last_seen":"2026-08-30T04:54:51.768087Z","times_seen":343,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":607,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.V9F49gYQNh4.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfqvPQtzWg7haAGZJexD7csmVtnHTg/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:35.915Z","timestamp":1788058235915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.V9F49gYQNh4.O/am=BECAAQ/d=1/ed=1/rs=AN8SPfqvPQtzWg7haAGZJexD7csmVtnHTg/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 96601\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 17:48:22 GMT\r\nexpires: Fri, 27 Aug 2027 17:48:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 26 Aug 2026 01:29:54 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 205333\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":277762,"size_decoded":97441,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2553)","md5":"332d9b4c47f9d7fa9cdc8076fd90478b","sha1":"87030c5796ebfe7cc18ba7f8eb0554f48676816b","sha256":"49ccb08db0d6ad64bd37a7ef54fe47ea00773b9fac82916a97c619402a3829ae","sha512":"cf41285d105ebbb5ac3df582b6f599fc8aa01f6a19aff2a9af7960e55edb179533afb42bed3186aeeca0c8c0ca13522d979ed7ee77839198f48c1c6747a2d172","ssdeep":"3072:sHC8+pK2udSWfCiuQzNbYHyJ5QQxzJuvEc1ClcHehnRFcmgal9q43:junu+6Qx+CNFW43","tlshash":"0244d8c8b26570a79363f4a5413f040eb13b68a9f9484dacb28dd8e26df4949417bf7c","first_seen":"2026-08-27T19:41:49.176999Z","last_seen":"2026-08-30T06:28:19.82974Z","times_seen":762,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":18,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/jquery.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.388Z","timestamp":1788058234388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30260\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89501,"size_decoded":30809,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-08-30T06:28:19.846018Z","times_seen":11194,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/invoicing-image/3.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.424Z","timestamp":1788058234424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/3.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7911\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7911,"size_decoded":8408,"mime_type":"image/png","magic":"PNG image data, 263 x 241, 8-bit colormap, non-interlaced","md5":"b6c271674d0f2805e789c2e76520173c","sha1":"d886710c03e7abb3bab526215605bba07c22cb92","sha256":"b95df0cd387779894568be922e2ca845497f455e397bcc8c0c6bfc0d235d137b","sha512":"e5c840c290c1a71c61b41e554d7566a1586c35b2115f238ee779c04ea6e97175a40ee972389d436d3edaf325275cfaf227b11e0d3e45b396bfeeaf3b0305b820","ssdeep":"192:hiyzhvrKRoHLXlQJlsMb+7G/QzPdf7e1D+1MGn44ve0:hrtpL1gb+76QzJ7ep+1Pn/e0","tlshash":"d8f1af8bb45c8e6f95a8520d13f52a1676044112f3c5076c3a4afcbb2e183eaaf88003","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.742057Z","times_seen":559,"resource_available":false,"data":null}},"time_used":1208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1196,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.112Z","timestamp":1788058236112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2028\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a3307d27ba285685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":657,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-30T06:28:56.754236Z","times_seen":94551,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.257Z","timestamp":1788058236257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"17fa2497bdae7324a17eaedfe6fc8650\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2027\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d28aa325685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11596,"size_decoded":4376,"mime_type":"application/json","magic":"JSON text data","md5":"17fa2497bdae7324a17eaedfe6fc8650","sha1":"27bce6a96d49d0077bc16228801a3089fce5be2a","sha256":"cce37a30801a132937edb0ac257f4ed917559c00d6a648716bd9ac406cfc62b1","sha512":"f4155fcb97d0180daa46cb293cd70f01b984c39f9895f76a0acc098b0c5f86f883378620e75f8fb79b0e0b1e5033e4ace16046bc48ca2a9c2127053ae48be305","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"98323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2026-05-13T09:28:21.606546Z","last_seen":"2026-08-30T06:28:56.742406Z","times_seen":12627,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:37.008Z","timestamp":1788058237008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 04:25:59 GMT\r\netag: W/\"ce7c2f1d3256f84d0760bd9f400963fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166879\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2d49da49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23063,"size_decoded":5842,"mime_type":"text/css","magic":"ASCII text, with very long lines (23017)","md5":"ce7c2f1d3256f84d0760bd9f400963fc","sha1":"1375bb0f0223b374f9805cb441970de2cb004591","sha256":"ff92cac16c5ea67e7df480d38f6fd806385a85e69d13da5317ceb3acc469af62","sha512":"3f33f2cf811797404a3bdd12ab6af60b5356bdd577c82e8a97ad7d4cf81dcd1b24bf87c1256e175a6ae6f44d0d2f9c9daf8c29316bc60b370288f98e78e5716e","ssdeep":"384:Wgfco+ziLwH0Lg26/tFTiBB6TXngxYe4fbFU3xi7Ur3K:B+ziLwH0Lg261F2BBCXrsr3K","tlshash":"efa2dbf5e47b10d87363c02293d4f2685499f370ca8adea1f52b661c49e52763682efc","first_seen":"2025-04-29T09:54:46.086393Z","last_seen":"2026-08-30T06:05:51.43131Z","times_seen":39683,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:37.075Z","timestamp":1788058237075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 04:25:59 GMT\r\netag: W/\"cbdd0e0be2613c6b640df2946da570be\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166980\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2db9e049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114106,"size_decoded":24593,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cbdd0e0be2613c6b640df2946da570be","sha1":"df3804c44e57c518eb007548536902ca46a7e8ef","sha256":"4e7d47ffbb92bc9205c6113755b8199880c4aa332dfc3e34218e4e2a0b4bb130","sha512":"c10ddf8aa735ee142197fcfdcc16999215efee2dc0264fb11679a2244fa9ef9eacd770f39b39ea08be251c953d64492533132a4c8f70cd7b12c9763fa0442342","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBC4GDJ7GjsVGdkauV3cGiH27PNWE98MGfU9:xVDJ7GjsVGbuVLmi0V0Z+tKaK","tlshash":"37b3a8b1b5a710cc73a3c23652d4faac1029e370c756cab9f427766d4ac21933262f9d","first_seen":"2026-08-14T21:10:06.914152Z","last_seen":"2026-08-30T06:13:39.015033Z","times_seen":816,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/odometer.min.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.187Z","timestamp":1788058234187,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/odometer.min.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 436\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3274,"size_decoded":996,"mime_type":"text/css","magic":"ASCII text, with very long lines (3251), with CRLF line terminators","md5":"33857183503886a3ea32dd5f475ed489","sha1":"6a702c75c57ee5cd30c4fa6fd22a6e5ce19ee58a","sha256":"53c8d41573daafb7177733ea705128818a28503ddc9bfc261a9988199b6069c6","sha512":"5800187f2f7656cee966134f8c67c75004a533403f4ceef58b053be20e912765bd1f2b65f68b3c9c0ef303b5511c1ccc2d9ab12d399f1103d6fa0be716c7bea2","ssdeep":"","tlshash":"4e61f5154f90036863367506bac81760befce9515123e98eb35ea54bcf43db9e398b0b","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.740603Z","times_seen":772,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/owl.carousel.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.396Z","timestamp":1788058234396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11146\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44350,"size_decoded":11695,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31998), with CRLF line terminators","md5":"efc01f2aded8e7b272ab9f9e1b3ecdb0","sha1":"eef21a57c46361f05c28d0d7b97fdc6530185c17","sha256":"668bfb67cff6b815ff9f9b82e070d4ad8721414bca6f3de21f10fb9f3e5dfa32","sha512":"20e04e83be2dbab7ec9972ac31ba5372fa53d62d046220f93e348c47f1840b636d54d8ca380eb36e7f7445123eec24e1d435fb61928eea259ccf912c5c3e8b08","ssdeep":"768:FCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSRc7UuHjRUQuFBt33:MITMFC4dbMVRSRcgRDV","tlshash":"cf137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7d88c213ffbc","first_seen":"2023-03-08T07:37:20Z","last_seen":"2026-08-30T04:54:51.732838Z","times_seen":1025,"resource_available":true,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":876,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/32/en-us.png","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:35.321Z","timestamp":1788058235321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /flags/32/en-us.png HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 30 Aug 2026 02:50:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 695\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Nov 2022 15:42:08 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDgnzgB6Y1QG6XG3mzgzbHlXHCWkBkTSacyrn5qS2igSQgoaX7xASdePnarB5iAlg%2FDDA%2F%2BV5UqXV%2FyMLR7k3oV6MpHghJ3K%2BidjyV%2BBASZQzJyWXlQEzOezpWK8qMlXZxmKsg%3D%3D\"}]}\r\netag: \"63692750-33e\"\r\nexpires: Thu, 26 Aug 2027 05:27:17 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(89;u=4;i=?0)\r\ncf-polished: ok, orig_size=830\r\ncf-bgj: imgq:100,h2pri\r\nage: 336198\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a3307d22cf3db4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695,"size_decoded":1516,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0c7d024de9ea604d5112aafc2738f21f","sha1":"19eae4ef8a7275c8cd5a6528e9c302c36feb8ac4","sha256":"529bcccc5a1659f26fe9f396a809996d064504598f145bee5abc62b94f7d1ec6","sha512":"1f2d1c7015d2b000f5b271ead4e16c3f36f049a34991d7032ee3b353ad7b1297bedcb4c75af662aa15d4b86a2f8187557d701abbdc7b32133ae1f23b9042af7f","ssdeep":"","tlshash":"670144c70d10215ccc2bcc5251eb044584a36a6a453b41ff0f2e980c56f595f5cd0305","first_seen":"2024-05-01T05:40:26Z","last_seen":"2026-08-30T04:55:57.502267Z","times_seen":2131,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.122Z","timestamp":1788058236122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"fd6a1dc367361b46e88438905eba1222\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 2028\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d27ca2b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244281,"size_decoded":69567,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"fd6a1dc367361b46e88438905eba1222","sha1":"8c92d42268d13ced5c98fb839e0d16dd13b6cc36","sha256":"8ba2dae871996fb11fa5b94635e9be6d65ddb35ee9174ab10dec721855d2f7f8","sha512":"941f750b77ddbe68626beb8bd9c22027a4d47f6e048c6600ffc81b9794c7495f40d4578ac15d1257820fbc8b91d0b134c3af6d8ef8aaad347f2c5984af62556c","ssdeep":"3072:A8gYgcvYqhJrTodCWFW1Wx08fMOAUmqCpQio/rtxLMz9gZ1a:5OCWFW1WxVfMOAEuKbLMz9S1a","tlshash":"7634c69df186b47606a37131501f320af23a685ab45ac0d4f636d8e1bd789cea133f79","first_seen":"2026-08-28T04:30:07.891582Z","last_seen":"2026-08-30T06:28:56.806035Z","times_seen":142,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.986Z","timestamp":1788058236986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 28 Aug 2026 04:25:59 GMT\r\netag: \"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 90277\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2d29d949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36092,"size_decoded":8708,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-30T06:13:39.064286Z","times_seen":50787,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/assets/png/1f44b.png?v=2.2.7","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:38.520Z","timestamp":1788058238520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /emojione/assets/png/1f44b.png?v=2.2.7 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 1311\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\netag: W/\"51f-Lhpf/5pVjttXKKAzYbc9FjP7pB4\"\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:50:38 GMT\r\nage: 1448558\r\nx-served-by: cache-fra-eddf8230174-FRA, cache-bma-essb1270042-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":1952,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c146761c3af8335c09eff9b1cdecbe08","sha1":"2e1a5fff9a558edb5728a03361b73d1633fba41e","sha256":"d84e890fa93c018d8b78e3bff3f6252036aa7ead6e48b292c0b92b1cb5127371","sha512":"b99a6fcfe0c4f4884fec84ec4e9951fc23b246302d4eac2996f4b6df3e063543b640a99e083494633f946fd85a3b217e18356e6b46d6584dcbccd88215638950","ssdeep":"","tlshash":"f221c59314628da28e23c525ac24c5e0b2fb40fcd78f8ae24903feb552b530c99d478b","first_seen":"2023-05-15T15:27:55Z","last_seen":"2026-08-30T03:18:49.628669Z","times_seen":21672,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/main-banner2.jpg","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.418Z","timestamp":1788058234418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/main-banner2.jpg HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 176206\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":176206,"size_decoded":176706,"mime_type":"image/jpeg","magic":"PNG image data, 333 x 500, 8-bit/color RGB, non-interlaced","md5":"9bd7f16a525c819fecf84b526735ca96","sha1":"909319e17fbd5d712149476dd62d36bf39d40880","sha256":"c9d463431eb53ff0cb84fe062468d1eb6c395758967007edba1b78b22bfd3daa","sha512":"e0d4115408c14d663c2cef76a02cf073b7880d42c89c8f67c7dc72e601fdf6f2c00b63ce1ba5309fee132cfe1fe208341436c08f007d897d8a8721c09d68e69d","ssdeep":"3072:1sUBiFs8cERrKxCPk8MiyvBxe8D6l9QbHZVH8gzIxL4lo7X+F:1sUBiFtvKIPlyUQbHzcgzIxLOo7Y","tlshash":"f50422afd15acd801334d71c2b2d2de981bcb4a4963ae9063c65cac755fe39a524f8f0","first_seen":"2025-09-07T19:34:52.134989Z","last_seen":"2026-08-30T04:54:51.788432Z","times_seen":206,"resource_available":false,"data":null}},"time_used":1144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":921,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/invoicing-image/2.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.422Z","timestamp":1788058234422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/2.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8398\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8398,"size_decoded":8895,"mime_type":"image/png","magic":"PNG image data, 259 x 239, 8-bit colormap, non-interlaced","md5":"a4895cbd0983fabb03a129eab4b30405","sha1":"1e8179843b8666448f2c7fd1c640693eb1f0c0fa","sha256":"6951f5ddaff6906a34ea3d6ef126e2a4af0d668b2c4904f26146248349da0cb2","sha512":"4cd7650f694e5b977f44c35f919a3b8bac1b4bf7ad41b3199881913a2ed23712fdfdbb34c3f4d8c2dd4dc60cd2b4c8c0537d9f41b0a11cbe6030d2078b2f722c","ssdeep":"192:tpwi7UClIdQwUTCxtwyOAlydbVevkJtSM3t8Sci:zX1CQwYdwk3SMPci","tlshash":"9102c086de3d51536dccbe65493083413c3a170ed659ba58bb23b13c6df812e82867c0","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.778329Z","times_seen":571,"resource_available":false,"data":null}},"time_used":1202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":685,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/map.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.433Z","timestamp":1788058234433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/map.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26716\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26716,"size_decoded":27214,"mime_type":"image/png","magic":"PNG image data, 910 x 443, 4-bit colormap, non-interlaced","md5":"84d3bcdd189d01880e685656aede0412","sha1":"22a1f1efc40b1ee1ff616e9da1d9a0e3efec8263","sha256":"ada5be5a95130a3615d8bbbc3ffb593c68cc36d50ae335d567b71ae95a6dbfea","sha512":"366c88a7add9a6c914aae9940b1ba1747949694da7193058c7efc741225bf498a67db626c7cd9793958031d737cc485fbe69ee6785961fbcccdef90b745d8070","ssdeep":"768:h9C/LmjrGCEQspqrxVnW2/MQd9dC37wTt:h9yYGP/pqzMsm3kTt","tlshash":"2ac2e1ad0c435ef6abf126ab03f3f3b5260a320a1264de955632d4747c8017df6a7854","first_seen":"2023-05-10T09:37:00Z","last_seen":"2026-08-30T04:54:51.772208Z","times_seen":342,"resource_available":false,"data":null}},"time_used":1215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":679,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.262Z","timestamp":1788058236262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 176\r\nOrigin: https://nexovabank.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":176,"data":"{\"p\":\"6a743e9a9457901d462198d6\",\"w\":\"1jvb193iq\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://nexovabank.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"KTtG9wdrhDzTnbnfl_ObD\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-x16m\r\naccess-control-allow-origin: https://nexovabank.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a3307d29aa3b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1043,"size_decoded":1416,"mime_type":"application/json","magic":"JSON text data","md5":"0f954837ccb319fb6b8e055719b309b4","sha1":"17614f5627330aca3afa390f077127e4f4fb2e74","sha256":"330ef7d8d4fe255c72c29e855b732926c0450a0afc6df1d5750cbcd45f8c7f31","sha512":"c9ff1c37e5551b675486b0e55a114d19eb4f4ec5a9968c6a4c02e9c964bacfedf8fa7d0e3f58a30fd353563a811c2506d7cf7b6703f0a75032a35c87149cd21a","ssdeep":"","tlshash":"5e11d8051e4c2d1577f2f3d40e822d9b08cc72e55ad424aee0c28e4734a536c2652f9f","first_seen":"2026-08-30T02:51:13.540425Z","last_seen":"2026-08-30T02:51:13.540425Z","times_seen":1,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.951Z","timestamp":1788058236951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166980\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2cf9d349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":1081,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-30T06:13:39.062373Z","times_seen":50952,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.955Z","timestamp":1788058236955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"822357ee182d7599dbd8bccaf1135fee\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166980\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2cf9d449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54327,"size_decoded":14881,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54208)","md5":"822357ee182d7599dbd8bccaf1135fee","sha1":"a715449d3db46546fd3f2cb4f29cc0a2296374da","sha256":"cc43558ab639c80d08ff24fe48929076e4596767601d22e882fdf3843f1f80a7","sha512":"e7fbb7574c2a7e6382dc818169f3fe873116258f483baf5975c5c1cc23e974f0207147f4d5ce90d4af7b2b7f43fca6ba55edddb18337c0ca213e70c2d0c46ad6","ssdeep":"768:Vlxfu8+HYUmI+rTZWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgbCBJf6stK4p:xfuroIf20UJWfO+Et7GZryqq0q","tlshash":"5533d8cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","first_seen":"2026-08-28T04:30:07.844276Z","last_seen":"2026-08-30T06:13:39.024114Z","times_seen":120,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb137.tawk.to/s/?k=6a939a7cf2907ab3e1d2f42a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTc0M2U5YTk0NTc5MDFkNDYyMTk4ZDYiLCJ2aWQiOiI2YTc0M2U5YTk0NTc5MDFkNDYyMTk4ZDYtX0FCVlVvNE9WRTZ5TFFjSjlla2JEIiwic2lkIjoiNmE5MzlhN2NmMjkwN2FiM2UxZDJmNDJhIiwiaWF0IjoxNzg4MDU4MjM2LCJleHAiOjE3ODgwNjAwMzYsImp0aSI6ImE4QzZWMk14a2ZLNmo0QmdCRWt4ayJ9.S6mGrwlEL1pDy4FPgyANtqWzpZa2aP7UO7Mn8YlimWKMFRa8k5gufFwkVUNs-HgbGbYwgiwAy0jDI3yN6ItLcA\u0026EIO=3\u0026transport=websocket\u0026__t=Q1GatWI","fqdn":"vsb137.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.979Z","timestamp":1788058236979,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /s/?k=6a939a7cf2907ab3e1d2f42a\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2YTc0M2U5YTk0NTc5MDFkNDYyMTk4ZDYiLCJ2aWQiOiI2YTc0M2U5YTk0NTc5MDFkNDYyMTk4ZDYtX0FCVlVvNE9WRTZ5TFFjSjlla2JEIiwic2lkIjoiNmE5MzlhN2NmMjkwN2FiM2UxZDJmNDJhIiwiaWF0IjoxNzg4MDU4MjM2LCJleHAiOjE3ODgwNjAwMzYsImp0aSI6ImE4QzZWMk14a2ZLNmo0QmdCRWt4ayJ9.S6mGrwlEL1pDy4FPgyANtqWzpZa2aP7UO7Mn8YlimWKMFRa8k5gufFwkVUNs-HgbGbYwgiwAy0jDI3yN6ItLcA\u0026EIO=3\u0026transport=websocket\u0026__t=Q1GatWI HTTP/1.1\r\nHost: vsb137.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nexovabank.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: lS5RITQkSVZxebzk9gfvog==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 30 Aug 2026 02:50:37 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: WvJamSTx5suxoZ6qv2AmgG96OZw=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a3307d2d48f35684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-30T06:22:58.106875Z","times_seen":18180477,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":19,"connect":16,"send":0,"wait":612,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/wow.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.399Z","timestamp":1788058234399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/wow.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2529\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8183,"size_decoded":3077,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8152), with CRLF line terminators","md5":"ed4b12ef0f7e4bf5d5ff3555d18718cb","sha1":"258fa26dec8fcf4769d49eaca6712ef56923673e","sha256":"3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461","sha512":"40d8f96697d393a5301d2960394cbea52ea64330a8b706a0982e9b17176bfc0d55394dd4f0fbea2cd1798c938e66ccccc671d803b2802f8b37c2c41f40c1200a","ssdeep":"96:xrZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:xry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"17f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-08-30T04:54:51.777285Z","times_seen":2657,"resource_available":true,"data":null}},"time_used":902,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/fontawesome.min.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.172Z","timestamp":1788058234172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/fontawesome.min.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17720\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89166,"size_decoded":18282,"mime_type":"text/css","magic":"ASCII text, with very long lines (65312), with CRLF line terminators","md5":"c858b27aa3346543c8a9fa0e8e48bf96","sha1":"682d2201ea724790a5216a74690362a32c201126","sha256":"51378e1e8afaf0d01dacb6da2997f918193e39ca0dfbf27b3d2bee66274403c9","sha512":"c28ffb3fc229404e589944c31aedbad4f453efc3e119531ace0eade726fc61460d68ac4272c717d81f18031d938a2688be7c8e15cc4ab77e42a00766a9682923","ssdeep":"1536:KbMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IVVUHsR+v:cd1NY95IVVUMR+v","tlshash":"5193a9e9e04c05d56732c44baf99b37c65b6f73cd5810da9f02f580c1ad26a822c6f7a","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.785855Z","times_seen":593,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/meanmenu.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.390Z","timestamp":1788058234390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/meanmenu.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1476\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6035,"size_decoded":2024,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (397), with CRLF line terminators","md5":"f92bd7e01c33f6a2bd73c5a2833b4874","sha1":"39533bc5c1e8128008023565e03830e00ce17808","sha256":"0927e12f94a642d9bbf07b4204102848162eeecadc02d002ace6fe334315b832","sha512":"e8a7d2768621e01fdf3e45eb187437f7c452f6fafd1d0a48add3844c7d16858ebadaa17f7b7272625f99b8a3f1f4426fab861d62cf1c0656bcca6617a12b344b","ssdeep":"96:cqHVT5bG+ESTXybNrNnaToz99MClbxXvY+CSoGZn7c6BFSEXT:zVT519XyJnl1BCSlZnl9XT","tlshash":"bfc1dd2bb5b044f8a0bb7a61b97af230f4f3660bf146d50131bd64262f31d6015a2fe9","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-30T04:54:51.770277Z","times_seen":619,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/mobile-app1.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.434Z","timestamp":1788058234434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/mobile-app1.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34784\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34784,"size_decoded":35282,"mime_type":"image/png","magic":"PNG image data, 379 x 516, 8-bit colormap, non-interlaced","md5":"699b168204a76ad1e27c5f4143ad1fba","sha1":"72c7b5eeb71c55ac41c695398869ad037d9973a9","sha256":"35e92b0810c69325db809fc3b87efe340a6701156e2c8ba28a7107b591b4204c","sha512":"40f01539416852d5ae43e6cb8f8f9b252deba45c7cfe3b1741780ddf8381b4beb571dd945df74ad6c5df92b2fa4c3ecb2350e9c994b352a82699c4b60babc2c6","ssdeep":"768:n9jREbqf7qd/qd07jKufx3++WK5ENO9bvwGc8C1tvNmeRrmI:9ji67J6nKu9++WY9boGVCXvNmeR9","tlshash":"6cf2f1e5c11d9d83912bc1ea33558ac9003a1bb505c68b26e447fbbee859f07cf9b611","first_seen":"2024-08-29T11:46:34Z","last_seen":"2026-08-30T04:54:51.748338Z","times_seen":352,"resource_available":false,"data":null}},"time_used":1230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":641,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.833Z","timestamp":1788058234833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 05:14:37 GMT\r\nexpires: Fri, 27 Aug 2027 05:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 250557\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-30T06:25:18.682343Z","times_seen":34915,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":21,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/responsive.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.189Z","timestamp":1788058234189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/responsive.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4725\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42016,"size_decoded":5286,"mime_type":"text/css","magic":"ASCII text","md5":"0c84a81a7dee675b6713af510b5725d8","sha1":"2ebb9bb229c01f940e0506c8d260947d9c48a996","sha256":"7b7658d6d943c42439e53284af5caef22a924806eba3501e6c0b11b88aa8a2fe","sha512":"c2c0b2cd39d3e338d5a56c5e5d9f26708341e44e6f7a7080db61814418971e4a0bbcf72ad786a7d1178aca1cd0443ee77207bf95f1120dde48b9106b5a397cfb","ssdeep":"768:88wvXFz1EdMOnP6FeVFMF530Cbms3LWg+6O2HFzR:88wvXF1EdlP6UVC7bms3Cg+6O2HVR","tlshash":"d713989f7aa3110c786aa6b96abd3a12b745d453d38edce379c4206ccfd46d00ad274c","first_seen":"2024-08-29T17:20:29.816202Z","last_seen":"2026-08-30T04:54:42.434651Z","times_seen":336,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Crimson+Text:wght@400;600;700\u0026family=DM+Sans:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.381Z","timestamp":1788058234381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Crimson+Text:wght@400;600;700\u0026family=DM+Sans:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:50:34 GMT\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7406,"size_decoded":1343,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d34c4709c845524ede56493d18bcbd6a","sha1":"9dc8b77976303bb765dd43925d29969e3b78548a","sha256":"462943911a79d4366ed009b4c2a87bdfd0d12a1d2c836cc5227192f8b5d71d86","sha512":"e3e0a30a216744a6a359dcdce1915cc4260c00f68f6ce2821285cd575db394a3a353c48732f66527071ac0bea7e8eb820440faea02f3f9e98e3feb642352f36f","ssdeep":"192:cG8Kt8Khj8K+88x8IF8sD8r8zm8ZwD+rw8+Owl+NwG+3:cfKuK+K+5y9s4grNis+3","tlshash":"41e1dd90047ba510eb971dc526cebe33ee4e61547454d878affe1888fcaec291362b4d","first_seen":"2025-10-26T02:17:19.355688Z","last_seen":"2026-08-30T04:54:51.755562Z","times_seen":163,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":32,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.720Z","timestamp":1788058234720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Raleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 30 Aug 2026 02:50:34 GMT\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31212,"size_decoded":1689,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f9308d064c8d95dd0d7f2b751df606c5","sha1":"697a5fcaaf26c9e959e578ef1483d9f096cea790","sha256":"eda15317dc0fa78f70e63940730f5e04d9a934951bbc55e3348ccbf6302aacca","sha512":"9c04884c77d7e5ffd39cd1a2508818e944e2d944821904f8a1df452e6ae993ce7505bc9901f6a42f64b788f7374b1a4fbdc98788b2b77449ee12f0bc65ae9124","ssdeep":"384:g3rw38T3z3M3dowhTCBERwmTx2nmwbTor2fwATXw5Mw1TGVQlwaT1ajKwvTs/yjp:UgYTgg2yr/F","tlshash":"28e2aca1091bd040ab476dc667cf3e36ee4e62147046993a9bfd58fcbca6d3613a070d","first_seen":"2025-09-10T18:04:04.291313Z","last_seen":"2026-08-30T06:00:41.304075Z","times_seen":2706,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/fonts/Flaticon.woff2","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.804Z","timestamp":1788058234804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://nexovabank.com/temp/custom/assets/css/flaticon.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4012\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4012,"size_decoded":4510,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 4012, version 1.0","md5":"59a3e44fffe01a82bd2c76e1b0b35e78","sha1":"058a144b3f6b5648c4dcf87f9be917be1ad97bb9","sha256":"8a0cdff6e76a8bbdeb9b412165ded677648e805fa58a39d5feedd20743f4c5fa","sha512":"337d05e3691e5c112af5d33573f349c66d60efaf5d83aff8c4a5b337b66be6dd7d7e25787462ab584e23b492c48d77161257ef20b8f5cf42663127c328f1e2ab","ssdeep":"","tlshash":"fb816d06b44db340cc16f131402742f7ba778699e81d152cdf4e564fe671b20b9abe46","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.762085Z","times_seen":634,"resource_available":false,"data":null}},"time_used":982,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":654,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.806Z","timestamp":1788058234806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 05:14:37 GMT\r\nexpires: Fri, 27 Aug 2027 05:14:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 250557\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-30T06:25:18.682343Z","times_seen":34915,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":50,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJXsCxGDNNQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:35.013Z","timestamp":1788058235013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJXsCxGDNNQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexovabank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26012\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 29 Aug 2026 01:02:11 GMT\r\nexpires: Sun, 29 Aug 2027 01:02:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 92904\r\nlast-modified: Tue, 24 May 2022 18:30:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26012,"size_decoded":26824,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26012, version 1.0","md5":"d7a5ae87e50b75fb48940e32792aa13b","sha1":"a09c276f3bc0261ef1c701820e663e3bdc0cc481","sha256":"e2ca4f57a77f4db70d61c4d16e748545ce2000e0252be1f67fa1c964040f9b9b","sha512":"a3a98d99186bd1df8aae3cc8de26835d6ff59e9d64c562ad8d4d74f2669a9bf059a286c30d1b593be986fd79b8b1e200e25bf4bc22ca28f471b20cb73a96ae6a","ssdeep":"384:qkpgd+DendA7JeJ5+FrHTtBrqWKcdPpZFixN8JObcaA348WBlXLzMlUaTnsM6SKx:qkOQiKJeCrgUP3ANdKOwlUUsiihp4i9l","tlshash":"52c2e1285467229b84e746b56646f2bc334ad4494c805fff85361332d1f6fb67349d1c","first_seen":"2023-05-02T18:44:39Z","last_seen":"2026-08-30T04:54:51.773136Z","times_seen":1542,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.956Z","timestamp":1788058236956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"44e853f1768c5c42ffba810a8458d285\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166981\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2cf9d549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111386,"size_decoded":28595,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"44e853f1768c5c42ffba810a8458d285","sha1":"93b2a70e5846076c3401589fd12dd085cb80124c","sha256":"dbd1c14da444268e08c613208fcb6d34b6404434481c43029bd11e3701cd6bf2","sha512":"a3c09e6348aab4d948f6cf8f388de125a1c901bbd53211832ee782d3c3dec7e09e72d82917a987836c5b321aca726bcdaf2e4c7f66875b14fcb3eddde140295c","ssdeep":"1536:BigMvSFu1D6woLGnA2jYDpgaOJDWbaylDluKzWNrHURPkx3uYV5pKYerlSy:47iul4vGiapx3uYV5pwrlSy","tlshash":"b8b3196ef091b43d89939162209f3212f3363d55ad19d0a8f678cef419d89c96127f3e","first_seen":"2026-08-28T04:30:07.860316Z","last_seen":"2026-08-30T06:13:39.062866Z","times_seen":120,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/css/owl.carousel.min.css","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.179Z","timestamp":1788058234179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 912\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3358,"size_decoded":1472,"mime_type":"text/css","magic":"ASCII text, with very long lines (3186), with CRLF line terminators","md5":"f999392859d1b921f83a84adb77be572","sha1":"1cd09814267e2033eab27dac1a594e80e647c212","sha256":"4c04da57afb7c99fe3485be1e8a53273116dfd3043a504f94222a89aea345136","sha512":"ad5bf8feb977b794d2dc5d18f69e9d55ac84549b2ad3f0e71be46dd2e1f9b1b72c4b037acb7c311d41bb2a8d18ecc470c5f55e505cb6fc93d9336aea77b84dde","ssdeep":"","tlshash":"e761cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd31447dae6d213ffcf","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-30T04:54:51.767097Z","times_seen":760,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/invoicing-image/circle1.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.428Z","timestamp":1788058234428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/circle1.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1868\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1868,"size_decoded":2365,"mime_type":"image/png","magic":"PNG image data, 180 x 181, 8-bit colormap, non-interlaced","md5":"3dc7e9a6a12a32389eabe691980a5039","sha1":"755848207b7f9149b3c9959dfbdae59c2486a9f0","sha256":"c4be331bc355e304e8227874a23bce8eb923d34031d32649a364863fa49ac5f5","sha512":"9d1736bf5f51e3689e2f0d9bcdbaeee71b8051484832562ac7951a2a2511814e632669888508123416c2b3780d10d156b32038b5d59b2a75b866396b8a517db3","ssdeep":"","tlshash":"fa3108fbbb2cbfc19f700aa742909a94c1f0030827b0612b89b742f0a5e9af41167d15","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.746447Z","times_seen":562,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/fonts/fa-solid-900.woff2","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.803Z","timestamp":1788058234803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://nexovabank.com/temp/custom/assets/css/fontawesome.min.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 126828\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":126828,"size_decoded":127328,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256","md5":"297973a488f688271dd223d542ba2697","sha1":"ed99d812e4c88826335f93acede3fad85c90fb54","sha256":"1b099f88c06ed0869872561c157f0ec9cbe133a0939d9ece4ee1e1f54bd4683d","sha512":"83c802972d9fee9dd7e3c0de42d8636c504e65ff20e43406bb446cc95a16acaa21789a03f0e2006148abfe47100bbd0c66aa4cf98f11e9b0220f1dcdb5204f46","ssdeep":"3072:caEaIjBfXHk79vCMuMZhQqmiutWxJfU52qiAx+SMfd:caEaIf3kxa5aaVMaHAScd","tlshash":"9dc3120ef3299411c6f0af104c63d6d627617389ffd548c767993e768aac9e70c28ea0","first_seen":"2023-04-10T14:50:44Z","last_seen":"2026-08-30T06:40:07.512808Z","times_seen":11486,"resource_available":false,"data":null}},"time_used":986,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":635,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a910db6dca/js/twk-chunk-2d0aef27.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:36.947Z","timestamp":1788058236947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 14:04:11 GMT","end":"Wed, 30 Sep 2026 15:03:57 GMT"},"fingerprint":{"sha1":"ED:3E:E2:72:09:AB:BB:25:BA:C7:69:1A:2C:33:2D:08:34:B4:E4:78","sha256":"91:61:3A:D6:A9:8E:D7:99:DA:67:1E:EC:DB:72:D9:C5:E9:CC:9F:8B:2F:1F:13:51:07:F4:56:8A:90:BA:77:C4"}}},"request":{"raw":"GET /_s/v4/app/6a910db6dca/js/twk-chunk-2d0aef27.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 30 Aug 2026 02:50:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 28 Aug 2026 04:26:00 GMT\r\netag: W/\"19b29f895ef388f22e5e71e26c17bf67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 166879\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a3307d2ce9d049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11888,"size_decoded":4541,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11888), with no line terminators","md5":"19b29f895ef388f22e5e71e26c17bf67","sha1":"a11b100ed38986ad57aec4bbadd17dcafb97f08d","sha256":"0d2f16541080b8c84b47c7a58a7009855881ab6099a5f2fa9897634086bda9bd","sha512":"d40ab858ec5ecc23714800a3b658cbb2d692079ffacd45b3c49589538cd6ed3416b7f7fda248bc069c083ecf9398c56b6460f80baf10efc1c63a6b6ae5d9f8e9","ssdeep":"192:0H9MaDRIU9HkKRU0Ve20lqXvtsTBkpfCNmeAhbKqxK4ILZvUZaUZSsgM:KDb9HkS316xAFKpLZEh","tlshash":"8d32a3c6e8c7b9564227160451efe128f73f2a94771adc18f0a895f34a948c3507bfba","first_seen":"2026-08-28T04:30:07.839547Z","last_seen":"2026-08-30T06:05:51.490015Z","times_seen":91,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:38.357Z","timestamp":1788058238357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 30 Aug 2026 02:50:38 GMT\r\nage: 2854906\r\nx-served-by: cache-fra-etou8220049-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 39460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302554,"size_decoded":40204,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32014)","md5":"7bb7aac0cac89a90304af1c72eb4f50d","sha1":"729f6f8ca5787d89743b0ed7eb27fd76406bf985","sha256":"f5c06455e539dcd889f7f05d709b5adc76c444099fe57f431365af2fc57e803b","sha512":"ed26bf873a3c5b2e48d8b3c955240a46d8f7d7f3c635ab138179b999dbadc77802285879cb1a833f703059762c346066090a9a740bfe881f56d6d95f2dca7f30","ssdeep":"1536:Q/drlyiQh7fh7RqgwkMTyDUV6HeAIDgI9IKQ/d2ffWifiIzQFBSob5/ove:Q/drlyogMVc6FIKV+ZLBSob5l","tlshash":"59546c7a87606deeea94d02d86db374af58c3c0453ed1266b66482cb27f543a33487dc","first_seen":"2023-04-05T07:49:38Z","last_seen":"2026-08-30T03:18:49.645752Z","times_seen":52132,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":9,"receive":8,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.389Z","timestamp":1788058234389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22162\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78085,"size_decoded":22711,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-08-30T04:54:51.764102Z","times_seen":3301,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":242,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexovabank.com/temp/custom/assets/img/invoicing-image/circle2.png","fqdn":"nexovabank.com","domain":"nexovabank.com","tld":"com"},"ip":{"addr":"51.79.176.96","port":443,"asn":16276,"as":"OVH SAS","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexovabank.com/","date":"2026-08-30T02:50:34.429Z","timestamp":1788058234429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexovabank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 14:23:09 GMT","end":"Tue, 03 Nov 2026 14:23:08 GMT"},"fingerprint":{"sha1":"D2:CE:4D:3B:31:6C:4C:30:DB:67:13:2B:1F:5B:8F:CA:C1:98:E6:F7","sha256":"E9:84:60:E9:92:EC:6C:95:D0:90:20:51:3A:9E:01:47:DA:F0:40:05:88:B1:1C:BC:75:CA:0D:80:05:92:23:06"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/circle2.png HTTP/1.1\r\nHost: nexovabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexovabank.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjAwMGZuQTVqT0M4SHVCb2lIcXBia3c9PSIsInZhbHVlIjoiSnRpWk41RUZKb3daUEZGSFZaYUFESjIxdjJIWHF3d25RZnM4TEhhV2VuR21jWElEYTRZcXJ3YWN3MnR5S0NkYzREbkJQN2F3TkxrRVliQXpPcXFiZG5jSE91WlB3Zk1MMCtpMjFCbkJ5dis3VnVnOUVsRVRxb2lqa0ljR2R5SWwiLCJtYWMiOiIxZjg4N2NiYzg0MDBjOGYxZmNkZjI0NTA5NmI5MDQxOWU0MzBmYWY0ODc0ODBlYTYyNDY3MWU2NjJiZWIyZWViIiwidGFnIjoiIn0%3D; nexovabank_session=eyJpdiI6IlJJVGZFdk52VGNzVFZ6S2lSSXk3Zmc9PSIsInZhbHVlIjoiUWFJRjVrWVowdk1IZFo1MVZrZGl2RlBFVkZBSjgzQXRJTGg1SjUwMU10UlIyZXlEY0NNNmJDVnozYWNoR2RPcnBLbkNXQzdVdUVwYWRmVis3VXRjYjY2WGVPN25HNFRoMDJ1d0F5OVR5MXJ6a0NDYWpoUmxOMXBqSzZRd1FIcHoiLCJtYWMiOiI3ZjFmOTFmZDIwYTA2MDZlMmVhNDc1Mzg5OWQ2NDFmZTRlNzg4NjY0MjRjMzE2NjUyZDY5YWQyYzFjM2M1ZWNkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=31536000, public, immutable\r\nexpires: Mon, 30 Aug 2027 02:50:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Oct 2024 07:14:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2040\r\ndate: Sun, 30 Aug 2026 02:50:34 GMT\r\nserver: LiteSpeed\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=(), payment=()\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2040,"size_decoded":2537,"mime_type":"image/png","magic":"PNG image data, 199 x 194, 8-bit colormap, non-interlaced","md5":"e8dbe3b7692b2ce535ef2b6ef2790a2c","sha1":"95a7b7aeb26abeb0a0e7ee14289af8a25bfe3c73","sha256":"652d894377d69fbf54715637a7dea271c3de099be2c422acd614493bd9656bde","sha512":"295ed174620b9454516a7e510ed475f3d4083fb74fc3163196a9ff60528b6ed8a973458b48f10172412a3ae59fdd28be40e5f5380c792232e75c90a05c4c20e7","ssdeep":"","tlshash":"6141fbd979889b7c976c967733a9e916eb7e143d7a1643efc3ac6453447d0103c01051","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-30T04:54:51.789422Z","times_seen":561,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-30","alert":"Sinkholed","trigger":"nexovabank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}