{"report_id":"657ad424-9609-4cd7-96f0-51ccb6e72cc5","version":0,"status":"done","tags":[],"date":"2026-07-01T07:10:37Z","url":{"schema":"https","addr":"nexustradeforgeso.com","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"title":"nexustradeforgeso || FX Trading With Class","dom":{"size":47772,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1339)","md5":"98ce27960de0b64fd43b38fd9a8ea88e","sha1":"d156e2d329cd39435256cdca3c28ce62c7883970","sha256":"ee435ec01cec6a51e36bdd4fc79792abd468869fd3d2477ef17f8d2691fe2129","sha512":"148958cc91e30da673faa5223b33aab7357f3cba7bfdf3c25bb308bfdfab1af875a2bd56f1c2f3fbd48afb93d427159a7903e5c55246c51fa0df72a8c518ba07","ssdeep":"768:FfXfil/0MBY5/Utp6Wbu1Txiu1qy9Vu1r1IRAtvK9x4vEv9dfh2xltroRf/kMUuZ:Nfil/0MBYMp6Wbu1xiu8y9VuV1mEvK9b","tlshash":"ee23b610addd4c330027c1c6a0726b4da0eb6f76e6238881b7ff076567dad94a81f65e","dom_hash":"domhash38bd3b66ab55a4ce2dc3ec83c058b05e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nexustradeforgeso.com","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-05T07:10:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexustradeforgeso.com","ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-07-01T07:00:16.90009Z","last_seen":"2026-07-01T07:00:16.90009Z","alert_count":57,"request_count":57,"received_data":9926265,"sent_data":29065,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-06-26T05:59:17.618077Z","alert_count":0,"request_count":4,"received_data":328851,"sent_data":1900,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-06-26T04:16:42.959688Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":1,"received_data":13081,"sent_data":560,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.126.36.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-06-26T04:16:42.976898Z","alert_count":0,"request_count":1,"received_data":1575,"sent_data":545,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-06-26T05:59:16.644955Z","alert_count":0,"request_count":1,"received_data":7732,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":2481,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"51.102.79.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-06-26T05:59:16.47245Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":636,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"532077a2c5c5a366fa061ab6e1f030ce","sha1":"5cae7d5026945a9565cda6939a328577d9f3c567","sha256":"b0d36f0c76737c2b143af3d5fc37b9740b186d7b3bab88a3f0698611af599896","sha512":"0ea47b12a58ab46f3e9f43bf6c0b8a243fd284f3ad168a4a2f44579b365809cf2372cb5f6f6815df79451439b9789557c51c1962566ba2e64966dcda9b3c6450","ssdeep":"","tlshash":"9a019e04b5f4a1f00873b42a23bb6a5c19365053b28ce74c387d86842f243d09dc368f","size":789,"data":"","first_seen":"2026-06-07T23:42:52.997883Z","last_seen":"2026-07-01T07:53:02.651057Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"01d6f99bef45ee7eadbde39108a79300","sha1":"22b81af8646fff4350874e95e8ddf4d2579e4733","sha256":"ff9d110b72f8f61c2a8dff41314a457104d5562db234e09207a6882f74e66448","sha512":"12c6d7290359a874622d4b4fdc212893d5ca652bd8544db85811b41d6641c689cb1a56acb37d426b032accf14c3f04a22bd46e6a36df68f8fab4d66256db0816","ssdeep":"","tlshash":"19d0a98cfcfe92000673b6f90c3b1808293a70ba371b1698b12c18a01fe9308002a8a8","size":221,"data":"","first_seen":"2026-06-07T23:42:52.999637Z","last_seen":"2026-07-01T07:53:02.651703Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"98fb9e712ef12f5215fe646ce6d3dafd","sha1":"ca82ce7c908ebbbfd69f951a4ea85674f7389184","sha256":"1a81663d5cc114b3b5542861e6bafb19290566f3f7090b0134b1f7c9f974fb0d","sha512":"005e7976fd2163854e429b394f0e9759023f7d8b27f37d5ab267622523a6fc42f4926983e8a2b209a8b4aabe1bc8821b760e6faf2bbdcc17bc210ce8e411a11d","ssdeep":"","tlshash":"88e0a23c3c308084479280b481bae6383e1a30600040da0398aa88ae18f0fce6e86899","size":416,"data":"","first_seen":"2026-07-01T07:00:21.55229Z","last_seen":"2026-07-01T07:10:57.711764Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"99ae6d4cf762c7b384fd180923a77653","sha1":"8d501edf243aaeeebf4bad38d8050a60b17fa5f0","sha256":"943e1681da375929c47cdf94b816bf7a4ef2bf94ad2827186c0ff2fa2e9bb109","sha512":"95dc7cfd1718867d6e33d455d51d7a2c5bb1a91446fae158ebf32abb568b38a7cf64d6352315fb5a0fa63bc6b6ab1923ac2a5bfd728af2feb559a4fc3948616c","ssdeep":"","tlshash":"dea0228afc0880a0823033ec020e800038a2080b3fc0c00028800030a808a2220a2e08","size":60,"data":"","first_seen":"2026-06-07T23:42:53.001983Z","last_seen":"2026-07-01T07:53:02.652501Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1329569e84618178ea69b277833cd9b","sha1":"c16776251fea747d4a78bb0eea79ceb210763899","sha256":"925cf1571f76eaa9548f2ea71bdb0295285c97e9112cb9ce5f3b23339f21e7e5","sha512":"abf494ad2d694fda446ee7c48bd8cda35879e47f168c5c2b595e79589594d530eb4f4821b4ac3e63ae0c967f76b1715edeada78ad4354ef0f04e3208e512031e","ssdeep":"","tlshash":"cfc08c6cb462c90803362c30873f9a4c1a9d3967e54cda8831114888eb74acba03b4cb","size":161,"data":"","first_seen":"2026-06-07T23:42:53.003213Z","last_seen":"2026-07-01T07:53:02.653169Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd926d1e169b5334ac5df82401419b45","sha1":"473f6163fac0d751e507776a1cfbe96e4e0e4177","sha256":"7b90ce7a4b3e7a6bbda83620fc4cefe0228a1a176849e717ff5944629679cc82","sha512":"db610d02b967a20517f228c2e82420b4285ee44c3d5b85188996d200c75397c4517d341d5f00f64e67f4c167d8f6bb10dca3c3e089f0b27ed626ee8e4fe5b1ec","ssdeep":"","tlshash":"539002087dd85080401634ec491f00085d221685304e5505188146c89f256194011708","size":47,"data":"","first_seen":"2026-06-07T23:42:53.004401Z","last_seen":"2026-07-01T07:53:02.655209Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"53367f5c6e4c4b14ead220e0cdbd49b0","sha1":"06efe73abd78dee290b109eff21c13bc02db5cb2","sha256":"49e6ef1f0f8b75cd1cc0e0eb105a1c356663d31c93367edbbdeb6c4047212576","sha512":"282492e79d1a497fcc870930206ef7c3e8248ee46b4d05b6e1449661b48b69dd75282298f37230912322fe69556b30230b97d74d0c68c8ea480edf83100e90b6","ssdeep":"","tlshash":"2d90020624015100463416e56186faca2691916600210961c5cc40a500c00618711bc8","size":50,"data":"","first_seen":"2026-06-07T23:42:53.005416Z","last_seen":"2026-07-01T07:53:02.656276Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"2da5176d71d61fff4c9312918184066c","sha1":"1500bc533538197e7e311940248ced8719408e14","sha256":"1910ed608682adc24b7344b6186115b6a808ebf857a458fd4a0eaefe8619426a","sha512":"e1a2ea5e5ec9844a7b60c200f0b31a896be214ec8fc046a6351d1c7dec9219c34f3c19b13d8447481a7ab279190df6bb73cba5e12732c5b354033589c52ca76f","ssdeep":"","tlshash":"a68004503714031c45dc114d1d55c450100401d401045550f57714c104d0011054d0c3","size":35,"data":"","first_seen":"2026-06-07T09:40:24.88053Z","last_seen":"2026-07-03T04:35:22.997647Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc0017759bdcf034be533a78d381e4a2","sha1":"6e4e1a69ebcaf6c70c507377b891609b6361909d","sha256":"52681dc683a474e84b257920731a72ce5e14ff386be2b3b021ae4754d6d2a381","sha512":"16b4ea0f506bf39b9b9226838806b8006a547fc154293259cdfe48707b48e5fa5787df7f9501d59b5909254391b2837c374e2db3ac3ab28692f6ab4c50c98a01","ssdeep":"","tlshash":"5bf0ec51f8b94e22747431224b9f05c9d7d665bf83024c5d726d24e59f40d2c541a0f6","size":458,"data":"","first_seen":"2026-06-07T23:42:53.007723Z","last_seen":"2026-07-01T07:53:02.660802Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fb0b1c6c164d28cb0c9744d21fdb397","sha1":"a4d866ee91b9f6d233f658d4fe64f988af57cf0c","sha256":"0f0d25dad5d1cdd4ddeb04a3c27ba1bcfd62fb326661c82443e6ae28b0ce6463","sha512":"fd2f216abf5b7aa274ec73c0945fa4c990ec12ad4fe717bec19bfa05df514e4dfc07d4f21d30ca1cde1b1eaa3fa82914598dd40c60fbfe7fc44f78b46f851fb0","ssdeep":"96:6nEvlc6l7fMlvI0G2xljlXrUKA/C4oX2yohpVy:6nEv9dfM/G2xltrUn/C4q2yipVy","tlshash":"86a1cf45fe8ca4a1c2bfd1631a9a0288d1bd22b5e001dd85392c9c8d5b91d28966ef7f","size":4819,"data":"","first_seen":"2026-06-07T23:42:53.012868Z","last_seen":"2026-07-01T07:53:02.661797Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"14011e1082bacfb24ff0f4211ee98e67","sha1":"2a77f1ad101cddeb0b2b55f8f1ac7d64d2911ec1","sha256":"a9db77ff703c4aa445d3a53e9a8c3149c2ae72efccff71aab46dee690d9ccb23","sha512":"deef4024900cf99b5a773129e7671bfc198f6fc0e4e74cd2b76ad30838cded8731f5033a1ccf6e787863792966170d7b20e742481973f2b6224f6a2792462dd2","ssdeep":"","tlshash":"cd01f913d964517a8657211b8d6fe2072bc3b0537c4e7a96f5c426881f1e12df2fa5e0","size":658,"data":"","first_seen":"2026-06-07T23:42:53.015163Z","last_seen":"2026-07-01T07:53:02.662811Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb3580f057942248d0a2d7b9294a8dde","sha1":"11741f02a5ee3b3f1ce3f68dc3f39525cdd1f34d","sha256":"0080f928a2f958c2fe8be7f0d3fb3a3cec5fd18f5792831195b210a98a095223","sha512":"3a4792b100fd593ea144022ba0de149f87375fc9487f24ad0feb26f0c8bb1aa95fca7dc226785871c68538f9d4250abd08778316a4944a9eb6bcf51439d5fda9","ssdeep":"","tlshash":"8dd02e2895904002a0bda020ce3b235c131830a9f2570b4a0000ace87ea913aaa61a8d","size":248,"data":"","first_seen":"2026-06-07T09:40:24.882469Z","last_seen":"2026-07-01T07:53:02.664123Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dfa702d97a754ae68adf6d39c55589c","sha1":"03fe4584bf59c27c497286ec5337d98680e73832","sha256":"e37fa2dc302002ebef53411e17149493351781457852dad1d69b2818aa979f28","sha512":"40eb1655df8c2467e4e74c959c6a4e4f50a24941d34f533b045fde1f25af10ca2ec032882939c1873fc43cf1298208dabea037f182ec74d7e41bbd1eacec4e08","ssdeep":"","tlshash":"5c21636626707dbac143b082a6bdbb0314355c3322222da3d2fcc9bca5fb96c2315587","size":1147,"data":"","first_seen":"2026-06-07T23:42:53.018674Z","last_seen":"2026-07-01T07:53:02.667444Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"a25d2ef58f79c24e104f2753fa7dc939","sha1":"e3d33356d5411eb2893103d231105c090dc3105b","sha256":"748e3bc5d0469b4eb81109d884e0578fa7c68fd8f226263861222d0a915c3e63","sha512":"aec130e4fabdb6491d3dcd4390c630689b1c7c90d54caad95440ce2b7b70ace4c19e16ee4249c5678abcc28dd1b6cd20b69429188e8854fe87f5289ec0cec587","ssdeep":"","tlshash":"cbe07d06249a145c029f1037572ee20c311a015fa8048d60be8e85145f30ec714a969d","size":306,"data":"","first_seen":"2026-07-01T07:00:21.563566Z","last_seen":"2026-07-01T07:10:57.733685Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Cbzgowwk.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfe560aba1935b8b39c27aa71dc58c8d","sha1":"57ca1d5bc344e6094a43b6b4caafad444e974c02","sha256":"0b7bcba63083ad1debda57e3152b6f65644d8a21fc14bb0fc9bb94e1acb10a0b","sha512":"e4af2de0e4e1a7febb2d879c0a4c1509d8c79b2a44bb7b85fbfab163a3176be3e94513d055341b8a3098c1cf50b16bf8518b1ec7cb44292abc29d8f7b68f895a","ssdeep":"384:8+mNMMmMwhaMaew3LtmBp3dUdhdr7NPCuukhP8ZvxklZBCQrdCfs:8+mQMGaMaewZmBByjhPkkhP8RBQrdC0","tlshash":"6d72e7b42310783f312f581d166ce9867336d198e55390199b2eec4e36cacc5adb3bb9","size":16285,"data":"","first_seen":"2026-06-22T17:07:54.172262Z","last_seen":"2026-07-03T04:40:29.493446Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-FggoWQFN.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3b9ca5f9f3b05da0401449cc4db4f1a","sha1":"1aa8e99f1cfe2d6776fbae7ef2fde26b2b18db70","sha256":"da0316ae7fe87925382357385427467ab57c40fd0d8659988ebc9545bc3f1fe4","sha512":"4e972657231b7b56ec4f852a2a6e5d11bde9b12cf6a55a723095f48c0030dd66693b08b9b0a4a6f42699f80ee04604a2e0310d59e4dae291d29281028adc5110","ssdeep":"3072:7dkD8hG1K3qO0L+YIjJI4JvGuzJmiJvGIJ4zXwvzSiGrKt3z+F00x61GfNVsIcuR:k8hlqO0LQ7hjPGrKt3kfHsIcuwtkqnQ1","tlshash":"26443ad53294b03543db51e6906f1106f33e5c19580d812cf269ede678baec8a2b7fb8","size":272004,"data":"","first_seen":"2026-06-22T17:07:54.09355Z","last_seen":"2026-07-03T04:40:29.481306Z","times_seen":378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery-modal-video.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0f5ec8f648c4516978464d123ac2c95","sha1":"8a26008bac548bf249e1c4438feedac8db10c53f","sha256":"0bf2593f8756cfc1ed133da2e0e2f115516de3f7c1e1bb9cf65b79663a3e39bc","sha512":"070d4738ddb8ef1239ec1ca988bb4d0ed93a2dca11299d27621fc04507b87bedf523f158cc3edd27e62098244595d9b7fe0ba41ea4f0e60a80137748ee845f54","ssdeep":"192:DGK1Z19TRXnRkq5YKWMKJr+6cmGXwE3ztZeyGmU:DTr/4MKJr+ZpzfGmU","tlshash":"a4e11b4531b0b8f7599b24f5292f980ab137299be44ad5e0b57fccd05fa4c4f1282f64","size":7395,"data":"","first_seen":"2023-11-05T05:29:38Z","last_seen":"2026-07-01T07:10:57.6722Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery-ui.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab5284de5e3d221e53647fd348e5644b","sha1":"75c20acdc6cbc6334fe2b918ab7afeec007f969e","sha256":"4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d","sha512":"2462acc237c0063263b52527cfecbc5d4063065c0cd541cd966d9924dec0d9af475184f732c92af9269cb08df993896893eff37ad4b18598ca4b7af7b5f02742","ssdeep":"12288:1vemHFgymzYDdHCcmM2/W/CCeS/QRzbrVDDdRO2:vDdHCcmM2/W/CCeSIVDDdRO2","tlshash":"f3b4a6c9f39c266a867a32595c2e42cdb23c8075d600587fbc5d59dc29a883c43bbf79","size":520714,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-07-03T04:09:41.905017Z","times_seen":16120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery.fittext.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"40635054e327b749517fbfc876906d27","sha1":"ed913a5402b9eefb57bf8c869f6746bdc1d264a9","sha256":"c499a934a3a4111346993c847d1b0ecd309295fb2d3f0e57b9d44ecaac732e17","sha512":"cb5c9f5d6bdb5e0828b3583c6d986da6b95ef56763910b56ae49594244e9b2043183e6f981d7a58c9f88ea2b240eadf0e79ae7775c7a6ba5bec47c0066ecf5a1","ssdeep":"","tlshash":"d211c29e387525203a1f67325b9f514cb620c6836676f400f48e43c4afd1819596b7d4","size":1074,"data":"","first_seen":"2023-03-07T12:02:58Z","last_seen":"2026-07-02T14:00:20.750529Z","times_seen":1023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/ion.rangeSlider.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7931ed50463c063934ba032039f944e5","sha1":"77bc0acbe31b2db5392ecb9601cd2b46835df183","sha256":"79405bfca3af9343fbe9b3ca24420c356a88caec09157b36417c3e90b4022cad","sha512":"6ec0af8717807514b253af236a1a0da8778ab1c699556dd921f4d243380053733512fed3f62daa28ccb83a42b306bf238a02739b42e1efafa243f9273a6395f0","ssdeep":"768:f7lVntiNtix6RmNvIUpSvtl1F70/AcYl1Xlqv9d:f7/nYNtix6RmNvIUpytl1F7vLlXqv/","tlshash":"e60330562265b7814592d0d4240d1b0b5b33f66eb35280bc7dbecbdb4daac6870be738","size":40975,"data":"","first_seen":"2023-03-12T18:18:24Z","last_seen":"2026-07-02T09:04:31.043403Z","times_seen":288,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/slick/slick-animation.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"993930401917e0f967afef1fe6138f7f","sha1":"535f6e1f2c002576d1107b567489188870dbdcd3","sha256":"1138fb0dac3902beb24680d9e7a7083a58a6683bd5c4b98577a5e1dbc023d963","sha512":"b28c217fb1ee2e244d7f4d644f5c1f82d04c37980f4c56fb37920d40d8e08caebaa501205fda18b37b484c04d459a77294749d2a8e2a4b01dd526f6f6e57e586","ssdeep":"","tlshash":"d631998c7c4314a2a39706f7001f2058467369e8e9344b5aac6ed8bd06ad42c7b5bf7a","size":1774,"data":"","first_seen":"2023-03-07T14:51:09Z","last_seen":"2026-07-03T04:35:22.929795Z","times_seen":870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/particle.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8e699d36df5cffab2b858271252b685","sha1":"a8c4037320fc4d656d7d4aecf09e73687e9b406b","sha256":"bf57343b6a5ba67f5623c541be1a2c8b2ecb90d0aaff160c0617dc9ae307da80","sha512":"e6d014051b8def75ca0a186dad63f197257077e3a1548065e64c1cba5663bbc1c9b9be262c62678c823121744658cd1b8b0294621bd345ec9584ff009f24ec53","ssdeep":"768:VJuZaeTJUI8t3SGbbtMErGwuYgU6vWB0qQGuhsxrOJYL5:KZaeTJB8t3SGbbtMErGOQ5hUrOJYF","tlshash":"1ff2411e52f22d3a63b6f3a08eddc110db676167278208b1be3c52689f3545253bdf64","size":34863,"data":"","first_seen":"2025-12-11T04:11:57.257939Z","last_seen":"2026-07-01T07:10:57.652806Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-03T04:52:26.898556Z","times_seen":4123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0652da382b6fceb033dfe2b6c06d4d11","sha1":"002da8cbe90fcf32fbdebb72386125079e3805ee","sha256":"7fa0d5c3f538c76f878e012ac390597faecaabfe6fb9d459b919258e76c5df8e","sha512":"b329c7b3eacb836583544f54d281d52544430a2a9fb7ad06716396eed5f24b2f2822bd078e5dcaf60bfb06afe04a3e0d0d5a5ce6f9ac364306189eadd95a5430","ssdeep":"1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTdl:fY8MaW2b+UELKTqnAdiq","tlshash":"6f9308ddb1c5b02287bb71a950af540bf236195e280c4450f268d8f9fc74a4ea27bf6d","size":93068,"data":"","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-07-02T23:27:13.227323Z","times_seen":4653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery.form.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","size":43811,"data":"","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-07-02T18:46:13.599283Z","times_seen":628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/select2.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b338d04357020cd5b4e5ac7f072203a","sha1":"f89637916296bcc140316bee408ffe5c3761bcea","sha256":"2ed33d2f001627136dfb0eeb53a317f1697bdfba2f5c4c41c991e44af4e590a0","sha512":"7e443df43a27853f4003979ad87cf066e67a0bff956ed5d19914d6fcc38beb980f83c2fb2b5b579d7f0c07bb39af3ac7b6557b796c8b269e39201bced295ddff","ssdeep":"768:feozhXg5pTFxxoiQduQLCyXiXCYGbk0QTeeUBo47RTeqX5+nZprIf/ny0RfS9KH+:Zx2xOiQduE88QSkqJKHrAvf2KHHe","tlshash":"0473c94db953723545bf21e6607f010a723a9b7e600589acb468c9d879bfc15322bf3e","size":77519,"data":"","first_seen":"2025-12-11T04:11:57.27141Z","last_seen":"2026-07-01T07:10:57.701602Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/slick/slick.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"99cf8430b8d81c268269760118ec31a4","sha1":"3fec23eeb6e45407f1fa1d38cf1cd3d463dd1f7a","sha256":"430f384b0fc496d9650c747cca458a7eae062530c718aa7a896d99031fbbae8d","sha512":"2af966001fb0c74ccb4117bb842173070c9a53f02f6f03e8260c5f059ea0f9917d301318e18028dfe0727171f645cf9f0cf6d9d1f26c8b701f393990619127f4","ssdeep":"1536:dXnrWutGI2R7H+e4yMibroAOGJATcY4sWlgN:dXnrlGI2R7H+e4yMibroAXJATbN","tlshash":"5283fe0b55e6131684a731b96bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","size":84265,"data":"","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-07-03T04:35:22.987192Z","times_seen":6519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/912465.jpg","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.513Z","timestamp":1782889809513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/912465.jpg HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6804307\r\ndate: Wed, 01 Jul 2026 07:10:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6804307,"size_decoded":6804576,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5520x3680, components 3","md5":"579ff8db7fb3d325056ca5f65ec30c13","sha1":"f820c7dfb7ec15704247dffe2b5c292884a184e6","sha256":"bff9892647d5c544272f10af642d8118850ef5cd8c51c08284b83c170fbb7971","sha512":"1f52ad313b325d9b2eb00cc005c5e710d18cf45683c2bd44672aece18d55260a25927554aeaff4a56425e0e6269d24e1e0caa8890a5fb9e3e22b114735b2ce36","ssdeep":"24576:XmjN/t3ZPUn0/SgBxippFjvjwn9tKIO5G28qd8:Xs1JsnuSScprjjIVOgqS","tlshash":"cb25331e07617336e46972380c6727647360cf6d45af6c49b8a8f31df89b592be8db02","first_seen":"2025-09-29T04:00:11.347534Z","last_seen":"2026-07-01T07:10:57.627965Z","times_seen":38,"resource_available":false,"data":null}},"time_used":5473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2084,"receive":3389,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/slick/ajax-loader.gif","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:11.804Z","timestamp":1782889811804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /slick/ajax-loader.gif HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/slick/slick-theme.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:14 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4178\r\ndate: Wed, 01 Jul 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4178,"size_decoded":4443,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-07-03T04:35:22.909145Z","times_seen":43661,"resource_available":false,"data":null}},"time_used":3299,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3248,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:15.778Z","timestamp":1782889815778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://nexustradeforgeso.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 07:10:23 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a39150b-891\"\r\nexpires: Mon, 22 Jun 2026 11:05:05 GMT\r\nlast-modified: Mon, 22 Jun 2026 10:57:15 GMT\r\nx-77-nzt: k98CoakFw4d08r9Q+71yiRoQso1qa684f933+SwYtlpS8YknguiI7FxBV68FP0Twq6xBIok\r\nx-77-nzt-ray: e2f754201d1c9ec15fbd446ab133dc31\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 13\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1034,"mime_type":"application/json","magic":"JSON text data","md5":"326e8bab008c1dbcf74f1d071d74b532","sha1":"38ef7ed5782ba7454bfd5ee59348283bf9a25f27","sha256":"15f5a980d7931c3d3c63d03733ab468c0352e210185294cfca411f903eabdbdc","sha512":"8293bb58ae378beec93e7ff6e7b12a37444d5243382ea06ad969b80d32c1fc317f987579f966a9ec01ab73df4054ac2f9448a342b4881bf071e2cf53880a258e","ssdeep":"","tlshash":"31417987c4f80e531b8c6227b89045515d90c3c7d88a3e0d72ad9a7f2f4cdaa20d6b7c","first_seen":"2026-06-22T17:07:54.215405Z","last_seen":"2026-07-03T04:40:29.50134Z","times_seen":373,"resource_available":false,"data":null}},"time_used":8361,"timings":{"blocked":-1,"dns":67,"connect":40,"send":0,"wait":306,"receive":0,"ssl":7948},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/css/main.css","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.424Z","timestamp":1782889809424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13858\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72590,"size_decoded":14168,"mime_type":"text/css","magic":"ASCII text, with very long lines (2612), with CRLF line terminators","md5":"f69aaadf69673a651e1b1620c433dbed","sha1":"2869d45dcacc818fece932f40d80c3614e7ee15f","sha256":"dd97d01ff6a150a166b00aa90141d9c78f1cbb62ee534f1c3c18109d831683ec","sha512":"466f6382a1b97d872881cc372d951ce1087a4ae750f2c1ef74ac82c8d5fadfa6e3c9ad822edabb4f7c88561721a1d9ecc87328bc76dbee1d17e33ac1ff291516","ssdeep":"768:ITjEwEmIkwfJ2JMpiWzqjv1Plo40PO1ZiEesTR5Rtsp40//7biuBWDABP8MsqZGL:UQ/PYWzK1tFiMftal0Mm","tlshash":"4263d8359a44224d633bf654f7f18b65ef7d0023ab0b09acb7947620d7974ac62b2bc4","first_seen":"2025-12-11T04:11:57.273005Z","last_seen":"2026-07-01T07:10:57.63464Z","times_seen":7,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/slick/slick.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.504Z","timestamp":1782889809504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /slick/slick.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14115\r\ndate: Wed, 01 Jul 2026 07:10:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84265,"size_decoded":14439,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"99cf8430b8d81c268269760118ec31a4","sha1":"3fec23eeb6e45407f1fa1d38cf1cd3d463dd1f7a","sha256":"430f384b0fc496d9650c747cca458a7eae062530c718aa7a896d99031fbbae8d","sha512":"2af966001fb0c74ccb4117bb842173070c9a53f02f6f03e8260c5f059ea0f9917d301318e18028dfe0727171f645cf9f0cf6d9d1f26c8b701f393990619127f4","ssdeep":"1536:dXnrWutGI2R7H+e4yMibroAOGJATcY4sWlgN:dXnrlGI2R7H+e4yMibroAXJATbN","tlshash":"5283fe0b55e6131684a731b96bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","first_seen":"2023-03-07T01:10:42Z","last_seen":"2026-07-03T04:35:22.987192Z","times_seen":6519,"resource_available":true,"data":null}},"time_used":2260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2069,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/913441.jpg","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.514Z","timestamp":1782889809514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/913441.jpg HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1429605\r\ndate: Wed, 01 Jul 2026 07:10:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1429605,"size_decoded":1429874,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3001x2001, components 3","md5":"20d3064c6b71ce7a1a7f9a61d26cdfe8","sha1":"d55815604e8083dab864c50db464d9ef3364b256","sha256":"5a603a782f4026dc7a680aadfbfddb175ab0c5bebd1409a565c0fd435514d996","sha512":"6604a9fa4014f701b1878da010856fca5b91d7ece51319e90e28a898332288410efb6217e216a61682bd8ffee56d9c3eae900b84b1c284b4577ff4d2eaa8331c","ssdeep":"24576:vnITqCN6QPVnsGPDl/raRMd/jw5qK55W0ShD:vnmqK6WnsSDURMd/mqKmFV","tlshash":"102533cc74188c52833dcd4a33dda2a4a1b4dc68853e99b1baa5c490eed508b5ee397d","first_seen":"2025-09-29T04:00:11.359025Z","last_seen":"2026-07-01T07:10:57.637622Z","times_seen":46,"resource_available":false,"data":null}},"time_used":4132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2117,"receive":2015,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/payment-options.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.523Z","timestamp":1782889809523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/payment-options.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2658\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2658,"size_decoded":2923,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"14bb6b183271d05eaaa1f79c4a1b0b2d","sha1":"071d0eb2a752e18645e4c58ecd304ea050fe8358","sha256":"e6e672bebf8bdff4e7964275033c6c65512d5c20a483bf32942830805fe3734d","sha512":"6a892bc7f44df2f8032d088e01afa281ec31e44cccaacee57fbd0d650896ee60ecd7ea1fc1fb4daa336d96f675d246cbd24613da6a872f0bf3a6c97980ab09b5","ssdeep":"","tlshash":"72513cc9f134a4419908e7e23ad3b012b348058097cd55beedced80a4eba1a34a191ef","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-07-01T07:53:02.566911Z","times_seen":336,"resource_available":false,"data":null}},"time_used":3199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3133,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/5221597006888.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.536Z","timestamp":1782889809536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/5221597006888.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-07-01T07:10:57.639016Z","times_seen":6879,"resource_available":false,"data":null}},"time_used":4399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:10.370Z","timestamp":1782889810370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 07:10:14 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: k7rhiPUEAkotX9RnDKPMYHEO35nMmOUs/f5+bnashdm8AK8b0ybCOjtNSVJDJer0xWTg0OE\r\nx-77-nzt-ray: fdb54123f26eed4656bd446ae6b2e914\r\nx-77-cache: HIT\r\nx-77-age: 12\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-03T04:52:26.898556Z","times_seen":4123,"resource_available":true,"data":null}},"time_used":4851,"timings":{"blocked":0,"dns":61,"connect":41,"send":0,"wait":874,"receive":0,"ssl":3875},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:24.543Z","timestamp":1782889824543,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Jun 2026 14:33:02 GMT","end":"Tue, 01 Sep 2026 14:33:01 GMT"},"fingerprint":{"sha1":"CE:B9:32:81:E9:D2:46:C8:31:53:55:D3:41:19:F7:94:91:30:D1:93","sha256":"54:C9:41:2F:97:E8:14:28:D7:2C:4F:FA:E0:C3:3A:BC:85:F8:14:22:1C:98:23:82:53:4D:5D:58:C9:0B:C9:68"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexustradeforgeso.com/\r\nOrigin: https://nexustradeforgeso.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 07:10:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: c4b9b8d0c31c1dd2975ba8f40325cc536835e186\r\nx-77-nzt: kzKyxl3Iud84kHVMq9Dymzy4WGVnnd4TGlBirRwtoN12xYibKlglmA+afU8s9mUK2IePC7Q\r\nx-77-nzt-ray: fdb54123b899fdc561bd446a2e692205\r\nx-77-cache: HIT\r\nx-77-age: 557\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7216,"size_decoded":3346,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"05d7604a60456ab25eb809557b353edc","sha1":"e32135b721636e7994e42748da35341e03dfd123","sha256":"5892aca834fe3f9f8fb66f68c8a3eb2295708a3b428cf355d7f3e3c1a0b7b62e","sha512":"db4124c008e22597192e1f07b44575ff191a03322f763bffb1efd129152e0f6f1546d98f5016967b32cc71a8252fefc0546aef0be258e8343fbba4ae2afe00da","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcbWbYKZcF+jhqoWQmw","tlshash":"48e1b54f9a144ea987c6438276cfb84675bc80734250993afd8cc8b842697cda3e3b94","first_seen":"2026-04-01T12:23:41.393805Z","last_seen":"2026-07-03T04:40:29.463316Z","times_seen":2691,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":0,"dns":67,"connect":40,"send":0,"wait":41,"receive":0,"ssl":432},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/css/ion.rangeSlider.skinHTML5.css","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.496Z","timestamp":1782889809496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /css/ion.rangeSlider.skinHTML5.css HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 787\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2881,"size_decoded":1095,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"7527c2a31899e27ddbc0fcba8dfc3b8d","sha1":"2bfe9183e5bb96bc47182777db08e6b21b5feee6","sha256":"1c66f216c5a9d7f0302d8fc6f081e44405b1d7b0365b802bb03356647da46c49","sha512":"fcf4dea5c2515fd8fc549848e155dd01df6ece39e49e769ba75a1de5bfadf81da1f6665c14b3a5c05c2973dbe1fbed9b4cc2b6d8bbc330b2daadc93ca2df2ebc","ssdeep":"","tlshash":"67517af2ea6f1c897511c1e03755ceca335a794f9006e9a9fbec756c5f013c4a4b1908","first_seen":"2023-04-11T04:10:40Z","last_seen":"2026-07-01T07:53:02.60386Z","times_seen":225,"resource_available":false,"data":null}},"time_used":1130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/about-us.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.519Z","timestamp":1782889809519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/about-us.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 174229\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":174229,"size_decoded":174496,"mime_type":"image/png","magic":"PNG image data, 387 x 387, 8-bit/color RGBA, non-interlaced","md5":"f8195a35534ecd1521b0078faf5918f2","sha1":"65cf837c09bd2a19f88ec46f735c9c7ef658fc64","sha256":"4c957e2021608be3ab5cfc03f66af645518ead3ca0a114c60b278a73150b66f3","sha512":"dc3b84bf1113caaa9b2c7a7560857a9479437bda527c0b6819e4f2eeedc7bd3d3cc9e7b670f907d31613d74f660273a3c9e9e1c36ce5088d72c0d232fc239419","ssdeep":"3072:p3McOQE8CPt5psfMNLOIe3L9kWDMf1UdH8AdYf/tUWgseSS1XHOPCJ:dMXRPtkXI6D7cA8tUMwHICJ","tlshash":"e604231f21296eb1298ae8f9c4a7dfa52ed3b15e2c20475b188f4078c1cf4295ff9694","first_seen":"2023-05-14T08:44:13Z","last_seen":"2026-07-01T07:10:57.645295Z","times_seen":156,"resource_available":false,"data":null}},"time_used":4158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3419,"receive":739,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/mobile-app.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.524Z","timestamp":1782889809524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/mobile-app.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2490\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2490,"size_decoded":2755,"mime_type":"image/png","magic":"PNG image data, 48 x 64, 8-bit/color RGBA, non-interlaced","md5":"e0aee317274edc9a1144d7ce8cee7193","sha1":"3afc320f00b0bfcc662ac894d4f3c615610b97aa","sha256":"d2c0d0d03eb2bf7031db3d32dc5a3c497d438f60f51419b80a57a8a38a330a38","sha512":"a775d2d68c21346333805e023e326628ff736455aa987018a66a50304699ceef9083253dcabec5459aea4b50ba396e89a9dfd30f3daa59401493adc077095697","ssdeep":"","tlshash":"40511a4add0e78866482859309e650329f76c982d4f1af27f3c2cc1ad8d10b9d96d5d7","first_seen":"2023-05-14T08:44:13Z","last_seen":"2026-07-01T07:53:02.567657Z","times_seen":364,"resource_available":false,"data":null}},"time_used":3197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3131,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/avatar.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.529Z","timestamp":1782889809529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/avatar.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12003\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12003,"size_decoded":12269,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGB, non-interlaced","md5":"57a2e849d5377d1ec8717549fb12b349","sha1":"2abf90c0b5f525c3b2c1a8ffc854e18367066125","sha256":"43b3af1d7dcffa55e1eff0f9da25e53f2d6cd6a2a19f67fe9f4d0217659d8355","sha512":"f76bfbbc455b4212a16a479574f53150d6018b119cb58dab1656eecaf0057ce6d420aab095b064a8f6b078a77dbbac4c02e2e107b92787afe32514c400ab83ae","ssdeep":"192:fq0YDT6VYJLqGsdKlvyEsJ4pemsNAG/bdZ0E1/7/uey4PiMOW+gIN3QSizpL3Aa0:C0AOYhsdKlvy6sWwbdeEBGcK8pz8OaL","tlshash":"9242af50b18594ca239cc9ecc4ebfa127cdd0d4de6e0e1605b5646ac0bde7b082a18f7","first_seen":"2024-12-08T05:01:29.176891Z","last_seen":"2026-07-01T07:10:57.648607Z","times_seen":33,"resource_available":false,"data":null}},"time_used":3372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3127,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/4991597591857.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.530Z","timestamp":1782889809530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/4991597591857.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-07-01T07:10:57.639016Z","times_seen":6879,"resource_available":false,"data":null}},"time_used":3130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/4941597591323.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.531Z","timestamp":1782889809531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/4941597591323.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-07-01T07:10:57.639016Z","times_seen":6879,"resource_available":false,"data":null}},"time_used":4042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/6391597006127.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.538Z","timestamp":1782889809538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/6391597006127.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-07-01T07:10:57.639016Z","times_seen":6879,"resource_available":false,"data":null}},"time_used":4257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/fonts/museo-sans-300-webfont.woff","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:10.396Z","timestamp":1782889810396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /fonts/museo-sans-300-webfont.woff HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:10 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35241\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35241,"size_decoded":35507,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35241, version 0.0","md5":"79d75c0208e298dce66a21f77de03ef7","sha1":"14541a65f08834b16aca7d79eb78300a65f1eda2","sha256":"6a382a283c77b7e93e7bb5b0b1902242082a4800dac20da3334d641093b33005","sha512":"e23287a1a3f805172827b81a38785715df3d3ce4616a44df12c6c4e28afe0a5e35e27565ab95b2f8bab571030aef814c58ff1ca58c23ec9dd5cd3425fdd8ccdb","ssdeep":"768:3vg7T1Jd9fkMdhwQ0zCkJK/Y4YWX6BmvD5PLZ3BGcKh2i0:3ydRhwQ854YK6YDhLZmh2i0","tlshash":"b2f2f135bc55036ac4b5b17fa0a69e0ad11a9543b29e6b33d433103f5147a87d3e33e1","first_seen":"2023-05-01T23:34:19Z","last_seen":"2026-07-03T04:08:09.475545Z","times_seen":4197,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:10.399Z","timestamp":1782889810399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexustradeforgeso.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 27 Jun 2026 22:39:43 GMT\r\nexpires: Sun, 27 Jun 2027 22:39:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 289827\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":12248,"size_decoded":13081,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-07-03T04:04:33.851561Z","times_seen":12236,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":0,"dns":35,"connect":48,"send":0,"wait":97,"receive":96,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/css/select2.min.css","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.434Z","timestamp":1782889809434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /css/select2.min.css HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1667\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10424,"size_decoded":1976,"mime_type":"text/css","magic":"ASCII text, with very long lines (10424), with no line terminators","md5":"a769cf7e571b263b8f8fc4bffd6d2465","sha1":"ba8a85a4e99d395a613344d5c36efdefae179ac7","sha256":"ce580292b91dd685123ba26c7cb27af7b10859852a7fc40b07258187d3a5b871","sha512":"88519cbe2fe7fcd418c528eddadd5363bc2260b57b5387c4a1accf13b8dceed238329fd44477576f0c604cf0cba5dd00c498571e622723d9b4607977a3901eb0","ssdeep":"192:ON5CgnTfc3aMlw8X8SV2KaECbjOZW4VcSvGuh:YCgTfXMhb8pEHZWUL","tlshash":"d922ba297ecc6234a07e8d7f5cf670a05638ed5fd4142bcab9aad954c9e10311b8b60f","first_seen":"2024-12-08T05:01:29.214501Z","last_seen":"2026-07-01T07:10:57.651761Z","times_seen":20,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":372,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/particle.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.507Z","timestamp":1782889809507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /js/particle.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6656\r\ndate: Wed, 01 Jul 2026 07:10:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34863,"size_decoded":6979,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1007), with CRLF line terminators","md5":"a8e699d36df5cffab2b858271252b685","sha1":"a8c4037320fc4d656d7d4aecf09e73687e9b406b","sha256":"bf57343b6a5ba67f5623c541be1a2c8b2ecb90d0aaff160c0617dc9ae307da80","sha512":"e6d014051b8def75ca0a186dad63f197257077e3a1548065e64c1cba5663bbc1c9b9be262c62678c823121744658cd1b8b0294621bd345ec9584ff009f24ec53","ssdeep":"768:VJuZaeTJUI8t3SGbbtMErGwuYgU6vWB0qQGuhsxrOJYL5:KZaeTJB8t3SGbbtMErGOQ5hUrOJYF","tlshash":"1ff2411e52f22d3a63b6f3a08eddc110db676167278208b1be3c52689f3545253bdf64","first_seen":"2025-12-11T04:11:57.257939Z","last_seen":"2026-07-01T07:10:57.652806Z","times_seen":7,"resource_available":true,"data":null}},"time_used":2256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2210,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/high-liquidity.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.526Z","timestamp":1782889809526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/high-liquidity.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3013\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3013,"size_decoded":3278,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"001e9c56a2141a9a9cfff2f2345b2b7a","sha1":"5f6ea2212fbf46397aef52d60a4f7066f13bca43","sha256":"69d8f05bf7d183bb934370c75eab1cd74480582ff61df2e4b1fc68cf15c05931","sha512":"0dca22014145c4db891b0c84fa7bc719df758dd1c08b11782418822cc87eb9bfa3ab118b577e38a3aa12fcbea907b8f2d1044cb63c23c4921e90528e26ee3b6c","ssdeep":"","tlshash":"c9513a4ee9545402829cea8b98f39117c72efc00a6e0a199d9bfd8129874123610c1af","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-07-01T07:53:02.649371Z","times_seen":334,"resource_available":false,"data":null}},"time_used":3243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/icon/icon-192.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:14.641Z","timestamp":1782889814641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/icon/icon-192.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 328\r\ndate: Wed, 01 Jul 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":883,"size_decoded":558,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"8167393a767711b117aca74f83d77988","sha1":"a2e30a96e13474b0d0861bf474d9d2dafd63a1fb","sha256":"58aa731d39cb5bf3ca6d714c94423a47c41c451ae0c5bf6f1b237b07f282ddd4","sha512":"24a41d03b4dcc191de8e86d7d062f135cc1e450f1ce2fddc248b6c5c5c04c182709edc5d5bf4f6d8d39a438e315d18cfe866a91287b77026b82908a39f0c0d66","ssdeep":"","tlshash":"d711dccd906f46eb091141807bc81c80d16913e63c5d9ff13a4d20aca4fe61cd62b19c","first_seen":"2025-12-11T04:11:57.272288Z","last_seen":"2026-07-01T07:10:57.654396Z","times_seen":7,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Cbzgowwk.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:24.173Z","timestamp":1782889824173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/main-Cbzgowwk.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nexustradeforgeso.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 07:10:24 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a39150b-3f9d\"\r\nexpires: Tue, 22 Jun 2027 11:00:05 GMT\r\nlast-modified: Mon, 22 Jun 2026 10:57:15 GMT\r\nx-77-nzt: k5uYdwuyVKW+K9+/XKupVL+CWQQqWp7qIBV7Wbp9E07ov+b38MNBcvx1Ram1GGhEc1T6cMk\r\nx-77-nzt-ray: e2f754201d1c9ec160bd446a3408720a\r\nx-77-cache: HIT\r\nx-77-age: 763796\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16285,"size_decoded":6807,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15877)","md5":"dfe560aba1935b8b39c27aa71dc58c8d","sha1":"57ca1d5bc344e6094a43b6b4caafad444e974c02","sha256":"0b7bcba63083ad1debda57e3152b6f65644d8a21fc14bb0fc9bb94e1acb10a0b","sha512":"e4af2de0e4e1a7febb2d879c0a4c1509d8c79b2a44bb7b85fbfab163a3176be3e94513d055341b8a3098c1cf50b16bf8518b1ec7cb44292abc29d8f7b68f895a","ssdeep":"384:8+mNMMmMwhaMaew3LtmBp3dUdhdr7NPCuukhP8ZvxklZBCQrdCfs:8+mQMGaMaewZmBByjhPkkhP8RBQrdC0","tlshash":"6d72e7b42310783f312f581d166ce9867336d198e55390199b2eec4e36cacc5adb3bb9","first_seen":"2026-06-22T17:07:54.172262Z","last_seen":"2026-07-03T04:40:29.493446Z","times_seen":388,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/diamond.jpg","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:10.815Z","timestamp":1782889810815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/diamond.jpg HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89005\r\ndate: Wed, 01 Jul 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89005,"size_decoded":89272,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2018:08:23 11:25:12], baseline, precision 8, 1500x844, components 3","md5":"2d070c14871655535abea5a79108551d","sha1":"9cc157b2c8f4c71f63a397808156e0eb0ddf4fcf","sha256":"aadc7d713b86ea72c8326cae0b0c436d7471c9883eb0b3b1d874011861eaa54e","sha512":"564099fe0027f7245f379507f4635f7d4d65286c3e0a0934824aa4ef584f50bdb932fcdee8de23e99920f7985e8a9f120f85a39ed6099d87e9b8260d56617382","ssdeep":"1536:AZIx64WS0aVV+utlEkYNyMYWT6b2siwkduPyhsXhJN:WoeYtUJP6d2u60","tlshash":"03936a35af6d0bc6c8c639371a00cdb593b64fd1439722eabe7c331a636dd50982466b","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-07-01T07:53:02.563769Z","times_seen":101,"resource_available":false,"data":null}},"time_used":4360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4170,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/slick/slick-theme.css","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.486Z","timestamp":1782889809486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /slick/slick-theme.css HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1166\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5370,"size_decoded":1475,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2f7f8091774b722b3802abf1a438a57d","sha1":"18e42e6bf32d5de1adeea8ca1b56ffb56cd00e63","sha256":"2e0e2bbb9aefed2cc4abfacfac18566fbff341171f635359cdaf5ec784f990a1","sha512":"def3f0a14299ca5510130c43d5f5586c64506c066fc16dcbcc7f6ce00bfbe1d3adbe6b55a1734b7d428f12a9fbc8227c8b4d92bd691d4dd4608ee717b9c2f564","ssdeep":"96:uV15CEXdql+MeDpaX806FjAf8YwkKbZk5PueS/Fj93:iP3XdcTGp6804Af8YwkKbZk5Pu1l93","tlshash":"56b113aca506e1c6163388803fa30755eb9b30431f110eacffa413545fbe0ac5ad9b9d","first_seen":"2025-04-07T11:44:39.851784Z","last_seen":"2026-07-01T07:10:57.656928Z","times_seen":33,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery.fittext.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.489Z","timestamp":1782889809489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /js/jquery.fittext.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 521\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1074,"size_decoded":843,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"40635054e327b749517fbfc876906d27","sha1":"ed913a5402b9eefb57bf8c869f6746bdc1d264a9","sha256":"c499a934a3a4111346993c847d1b0ecd309295fb2d3f0e57b9d44ecaac732e17","sha512":"cb5c9f5d6bdb5e0828b3583c6d986da6b95ef56763910b56ae49594244e9b2043183e6f981d7a58c9f88ea2b240eadf0e79ae7775c7a6ba5bec47c0066ecf5a1","ssdeep":"","tlshash":"d211c29e387525203a1f67325b9f514cb620c6836676f400f48e43c4afd1819596b7d4","first_seen":"2023-03-07T12:02:58Z","last_seen":"2026-07-02T14:00:20.750529Z","times_seen":1023,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/slick/slick-animation.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.505Z","timestamp":1782889809505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /slick/slick-animation.min.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 603\r\ndate: Wed, 01 Jul 2026 07:10:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1774,"size_decoded":925,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (746)","md5":"993930401917e0f967afef1fe6138f7f","sha1":"535f6e1f2c002576d1107b567489188870dbdcd3","sha256":"1138fb0dac3902beb24680d9e7a7083a58a6683bd5c4b98577a5e1dbc023d963","sha512":"b28c217fb1ee2e244d7f4d644f5c1f82d04c37980f4c56fb37920d40d8e08caebaa501205fda18b37b484c04d459a77294749d2a8e2a4b01dd526f6f6e57e586","ssdeep":"","tlshash":"d631998c7c4314a2a39706f7001f2058467369e8e9344b5aac6ed8bd06ad42c7b5bf7a","first_seen":"2023-03-07T14:51:09Z","last_seen":"2026-07-03T04:35:22.929795Z","times_seen":870,"resource_available":true,"data":null}},"time_used":2092,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2092,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/cost-efficiency.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.526Z","timestamp":1782889809526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/cost-efficiency.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2769\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2769,"size_decoded":3034,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b873a7da38bf955f39ce92839bfa14da","sha1":"8cfd6108be017c4997690c3ff18da325f60694ac","sha256":"17cbbcc5fe7275156ab97be0a10259d9055415cbb41f90302fcac1064390c5a4","sha512":"934a5036e2561f417bb246940b5d4239d56282d05a072018576f6c033352439a5c213eef7e6678a99ecaaf2c027409571b783a3bcce48e2f930808eb5237abfa","ssdeep":"","tlshash":"94512b946e223881f064f089d7c235ab96560c41ced9a5fadd8fcc032da96bcc9de1c2","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-07-01T07:53:02.638303Z","times_seen":333,"resource_available":false,"data":null}},"time_used":3196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3130,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/6961597006775.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.537Z","timestamp":1782889809537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/6961597006775.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-07-01T07:10:57.639016Z","times_seen":6879,"resource_available":false,"data":null}},"time_used":4258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/5761597590797.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.533Z","timestamp":1782889809533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/5761597590797.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":1480,"size_decoded":773,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"71079ddcec1b1daf1ae198e5f3e2dd8a","sha1":"41daecb15fc8a224c3b245ffc483c734f131b242","sha256":"65fe22b051dda4247d08870917a50edd4d1810b076def87862c043fa3438c392","sha512":"c4b76be539d0a18a0b4bc81c0f1b2971290a70cbd8440dd39cb0589b006b6edd56170f19e42aac3ebf8c377ea4708897c3eb0d9dc263bf0c50bd4cce752bd2f4","ssdeep":"","tlshash":"fe31209e86b742016710c350b8f9b114c961408bfbddad44f86f58289fccb5af4a3b6d","first_seen":"2026-07-01T07:10:57.660873Z","last_seen":"2026-07-01T07:10:57.660873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4261,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/1532345115h7.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.543Z","timestamp":1782889809543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/1532345115h7.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2617\r\ndate: Wed, 01 Jul 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2617,"size_decoded":2882,"mime_type":"image/png","magic":"PNG image data, 154 x 97, 8-bit/color RGBA, non-interlaced","md5":"0e91475b41c30343e41037fb236bb160","sha1":"59df634a0bfa11b7976960dd8d15954ba8553cba","sha256":"9ba9d895b64a52ba98b8fdc50a04685c8632d80fc7ebb4d4d282d33cba260b34","sha512":"00de32176db6ba270cca062795fa74b97e65c42683a7d12147e8422884bbd70d4d82437eef1cf05254865b44b79c9cd03ecf92101e8a8a130d67c801aa42c03b","ssdeep":"","tlshash":"ca51f84fa38170f2aeaed490ee4f6efc39564400104b6d04f6578e5131b8ccec4ce868","first_seen":"2023-07-11T23:31:48Z","last_seen":"2026-07-03T04:35:22.980216Z","times_seen":176,"resource_available":false,"data":null}},"time_used":5320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/widgets.bitcoin.com/widget.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.501Z","timestamp":1782889809501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /widgets.bitcoin.com/widget.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 648\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1534,"size_decoded":878,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"e60a08a921161237c143fdb7a0eaf191","sha1":"d68722922cac05c5271142d2688cfa788cbed88e","sha256":"077d37c165e245135dca77301cd979a94aae6bf498f6df9622cd3b4aa0f846bb","sha512":"7e296c263ef73f5c737eead2b1888c9a5021dd2d8a144c93ff6cc79f0972e894f3ec5304106b9c8d502e6b8e7c0aa4ba5a2d490b98397308d3f24504b7c5c7fa","ssdeep":"","tlshash":"fb31752ec2c1064640270154fbc0e65463198392e5460ff13b8d756ef9cc0fb66937dc","first_seen":"2026-04-05T05:25:31.312331Z","last_seen":"2026-07-01T07:10:57.664369Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1125,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/add-bitcoins.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.518Z","timestamp":1782889809518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/add-bitcoins.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3266\r\ndate: Wed, 01 Jul 2026 07:10:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3266,"size_decoded":3531,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3dd7c27dba155bb636097e7178895349","sha1":"dd95a6eba0f9e5e422eeb7fcf8dda39f8608424b","sha256":"67d5be7b9e96c63b241186a95d4518006e7baa0931794529bb85ea4bfcbcc16c","sha512":"ef273128794ae260c0f72ff59656bdee83c19bf4ce2efd2f15ef0c813a6a44fde9de6f3cfb23d80ea44e437e072ae65d8c452a59db390f98a9d86dcfbcc1305e","ssdeep":"","tlshash":"94615d18e341d412c792945618ea8d39ff1f4690d583fa15ed17d822ed743b61b7e8c3","first_seen":"2023-05-19T19:25:55Z","last_seen":"2026-07-01T07:53:02.640825Z","times_seen":366,"resource_available":false,"data":null}},"time_used":2249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2080,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/595e78a9a1c5d46866c35b3df3f4091eea8453ea.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.126.36.162","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:15.242Z","timestamp":1782889815242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/595e78a9a1c5d46866c35b3df3f4091eea8453ea.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://nexustradeforgeso.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 07:10:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c3-pi38YXoJ+Gh8KY0KIrVCVq/hyhU\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1219,"size_decoded":883,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"77f3208f0a09e466ee1b986adb47c8f5","sha1":"a62dfc617a09f8687c298d0a22b54256afe1ca15","sha256":"91a17bbfd2bd79d8531b8f757130530f76cac8fabbde2bf36a4086581c3b336a","sha512":"c305c80dd01a0dcc6bbab5944d97dba93ada164a9f6e9702bb420735ec8a9c4c1126d4102cce965e59cf109e96aaefa97ae37e7c18997e11d4efd867005139f9","ssdeep":"","tlshash":"5321426d4a6822fe9245c6d6c5047f035abcdcb37100397eea0d0a0d60eb2a6213646b","first_seen":"2026-06-07T07:17:39.486436Z","last_seen":"2026-07-03T02:31:13.534656Z","times_seen":46,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":0,"dns":37,"connect":304,"send":0,"wait":79,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.422Z","timestamp":1782889809422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 675\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1622,"size_decoded":1083,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"724fd699efdd9a2e050e03adee675c0f","sha1":"269ceecd2bc502fc8477e084804103a0aa0c3df9","sha256":"521bdfed2ff62aac4c2b9a2cda70f7da9783b44ed1703386cedb9241bfe8d71a","sha512":"4d93e2045551a3748b52913bb9e0d8b11aec5f00817fa44557b95f8cd158a2100418016d06d36660eca0ad94f34d32e3afce04932e6f7f10b5848e91a8b53654","ssdeep":"","tlshash":"fc31862dd68507aa90234114fbc0e6987a298361b5860bf2374e75bff9cc1fa92533cc","first_seen":"2026-04-05T05:25:31.31798Z","last_seen":"2026-07-01T07:10:57.668081Z","times_seen":5,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/css/ion.rangeSlider.css","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.495Z","timestamp":1782889809495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /css/ion.rangeSlider.css HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 746\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3355,"size_decoded":1054,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"ebeaf8ee0e04d67d172ee639713fad1b","sha1":"81dc58f28df7ca458306d493ae9c78c8450d48f8","sha256":"e5ce02a6caedb279a23c84d2f04055f556fc03a44f3fa6f92f038288fbc70484","sha512":"af5caa3b30e71adbf92d03500ec05c2df30a843452b62a98fd6804d0b9c255f97ddf2df8d982b9cf4f4766f718b33c7e210efda23af522a8c7638ee03b9d6f63","ssdeep":"","tlshash":"3d619b195da31640780af6f06f967b9e7630b00fdb07dda87e4d6204cf4b389a692f91","first_seen":"2023-04-07T11:16:34Z","last_seen":"2026-07-03T04:47:30.680445Z","times_seen":830,"resource_available":false,"data":null}},"time_used":1273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/ion.rangeSlider.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.498Z","timestamp":1782889809498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /js/ion.rangeSlider.min.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8789\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40978,"size_decoded":9112,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (632), with CRLF line terminators","md5":"7931ed50463c063934ba032039f944e5","sha1":"77bc0acbe31b2db5392ecb9601cd2b46835df183","sha256":"79405bfca3af9343fbe9b3ca24420c356a88caec09157b36417c3e90b4022cad","sha512":"6ec0af8717807514b253af236a1a0da8778ab1c699556dd921f4d243380053733512fed3f62daa28ccb83a42b306bf238a02739b42e1efafa243f9273a6395f0","ssdeep":"768:f7lVntiNtix6RmNvIUpSvtl1F70/AcYl1Xlqv9d:f7/nYNtix6RmNvIUpytl1F7vLlXqv/","tlshash":"e60330562265b7814592d0d4240d1b0b5b33f66eb35280bc7dbecbdb4daac6870be738","first_seen":"2023-03-12T18:18:24Z","last_seen":"2026-07-02T09:04:31.043403Z","times_seen":288,"resource_available":true,"data":null}},"time_used":1270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/1532345051h7.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.542Z","timestamp":1782889809542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/1532345051h7.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8640\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8640,"size_decoded":8905,"mime_type":"image/png","magic":"PNG image data, 154 x 97, 8-bit/color RGBA, non-interlaced","md5":"f42e758fa06d469ece0d4fa1fb8be1b0","sha1":"c36ff830a02d16038223b12dce64717a67564076","sha256":"4edc66873fd2660752f7813bd18189c895a83ee4466b15a5ad3449cd9a4290e4","sha512":"7502b94d82bdee0578c7fba42783c2a8405943904d815a5f185ba25770f3f886fddc0a3215cf24f2e5ab5a360fd63308cd77f1b2b9db0293eb8faa76f9869ee1","ssdeep":"192:hjwqBGZqa3ILk4YPHdiwqnwU7byXfoL+7dH1qG3eb:hLBaqaek4UHdivpL+hH1Beb","tlshash":"b502af9da0e09b644e6cccb1f32cc591e9b97756c230df0d3607b7a80b0378f54a66a6","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-07-03T04:35:22.854235Z","times_seen":203,"resource_available":false,"data":null}},"time_used":4253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery-modal-video.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.492Z","timestamp":1782889809492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /js/jquery-modal-video.min.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2805\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7395,"size_decoded":3128,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6599)","md5":"e0f5ec8f648c4516978464d123ac2c95","sha1":"8a26008bac548bf249e1c4438feedac8db10c53f","sha256":"0bf2593f8756cfc1ed133da2e0e2f115516de3f7c1e1bb9cf65b79663a3e39bc","sha512":"070d4738ddb8ef1239ec1ca988bb4d0ed93a2dca11299d27621fc04507b87bedf523f158cc3edd27e62098244595d9b7fe0ba41ea4f0e60a80137748ee845f54","ssdeep":"192:DGK1Z19TRXnRkq5YKWMKJr+6cmGXwE3ztZeyGmU:DTr/4MKJr+ZpzfGmU","tlshash":"a4e11b4531b0b8f7599b24f5292f980ab137299be44ad5e0b57fccd05fa4c4f1282f64","first_seen":"2023-11-05T05:29:38Z","last_seen":"2026-07-01T07:10:57.6722Z","times_seen":115,"resource_available":true,"data":null}},"time_used":1135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1117,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/download-bitcoin.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.515Z","timestamp":1782889809515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/download-bitcoin.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2676\r\ndate: Wed, 01 Jul 2026 07:10:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2676,"size_decoded":2941,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0f2b8069e3a60e3b937617e941fda05c","sha1":"851af569424fc14bea65f49c2441fb62032e19e5","sha256":"e37b52ca61cf380ae491e4ddd7c1ef10d4cee012e696b3ee5d7deb7584b6b8f5","sha512":"d322e64807a3ab29bd8da86cc44b7e3ffba4f0c510e96f39c96fbfe4f7356d8c3a09508200b71faf1e97924b4d02f0096a649b03dddcca803d6abcfc392a17ca","ssdeep":"","tlshash":"2f515c067e64ad803841058310abe4f1d979c7a1a090fd13a9dedf0a8da20fa207d0f7","first_seen":"2023-05-19T19:25:55Z","last_seen":"2026-07-01T07:53:02.605223Z","times_seen":372,"resource_available":false,"data":null}},"time_used":2249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2082,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/buy-sell-bitcoins.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.518Z","timestamp":1782889809518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/buy-sell-bitcoins.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3823\r\ndate: Wed, 01 Jul 2026 07:10:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3823,"size_decoded":4088,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"2b3b1e3d4335cf2e13cac2ab649da39b","sha1":"e0fbead572e61c239ebd312c33ef0ae1812d11c1","sha256":"6fc965cc439453ac7f309a61f6af2983d139a2202de4a3b382ce545941496c9a","sha512":"c8c7ba93a3df6c9053bbfb184d2527483293daa1bd8b71dc61834d475af4ef2c35295d9b4d2b06a6df3de7ba219d835142f60c841a3912dbc8e550436560e57f","ssdeep":"","tlshash":"49714a0566322c81a23e50d678e751ca6e56274095a0f1a7fa8be4020ec237a8858acf","first_seen":"2023-05-19T19:25:55Z","last_seen":"2026-07-01T07:53:02.631315Z","times_seen":365,"resource_available":false,"data":null}},"time_used":2248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2079,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/fonts/museo-sans-700-webfont.woff","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:10.394Z","timestamp":1782889810394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /fonts/museo-sans-700-webfont.woff HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:10 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33342\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33342,"size_decoded":33608,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 33342, version 0.0","md5":"98308b503ef41d53afe8edf9e0484450","sha1":"7a555750746beb8154a505b163f3643be14328d8","sha256":"3675ed57fbe359962a7a4a6c67096a2e59a4e3930a0ffb8550414e03a0c89dc2","sha512":"ce9c77111c15d3888c53483aca861360ae1fc8cf0eec2a6b0ac245ae54b93512a6a98892f8ce487e3606c7ea73d41f2e98debee6232754d95397bd3489e9a063","ssdeep":"768:eF54LJs4ZhhbYoI67on8oLE/XVqomN36f40MDr8hRH:ev4LnZhhcoIwG8u134TXfH","tlshash":"bce2f17543746651c241f8738ddf0f9dce980268b5195623e2f2e23a344e3ed47641db","first_seen":"2023-04-16T22:45:21Z","last_seen":"2026-07-01T18:43:37.729962Z","times_seen":661,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/fonts/museo-sans-700-italic-webfont.woff","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:10.397Z","timestamp":1782889810397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /fonts/museo-sans-700-italic-webfont.woff HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:10 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37730\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37730,"size_decoded":37996,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 37730, version 0.0","md5":"8eb5d4d2940ab46ff33fd07e1072c286","sha1":"e5dbf9a65fd8a3f4918b0eccd277f3a42ec621f3","sha256":"7a9d72abce9a1f581c7e895ac4949a019129593311d9c8285cec7b5e11128e50","sha512":"e0806b95c5edd3c6910cd544b467110885105b8fb1ff6425c64a45aa637498be0d0bdfa4b1a2f84aa19f19fd9897ee68d55896ba2d2f680a4fe4dc48e4695222","ssdeep":"768:IwLnWoS/A7cSINX5GATQSypTAwoElMV49QRb:XLnWoSP57pEATb","tlshash":"e903e06d7c9aa83dc69278aeb01eaabcecbac840f78f441116c3d54945ec19492d90e3","first_seen":"2023-07-17T18:30:40Z","last_seen":"2026-07-01T07:53:02.610578Z","times_seen":85,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery.form.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.431Z","timestamp":1782889809431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /js/jquery.form.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11763\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43811,"size_decoded":12087,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-07-02T18:46:13.599283Z","times_seen":628,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/5321597006964.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.535Z","timestamp":1782889809535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/5321597006964.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-07-01T07:10:57.639016Z","times_seen":6879,"resource_available":false,"data":null}},"time_used":4399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/5b55bb652af1a.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.541Z","timestamp":1782889809541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/5b55bb652af1a.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5617\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5617,"size_decoded":5882,"mime_type":"image/png","magic":"PNG image data, 154 x 98, 8-bit/color RGBA, non-interlaced","md5":"aa54e3f653a0e65d03e0f57b5104f885","sha1":"d922ff4b83d97a520bb74d915f2d4cff9a77733c","sha256":"ba9da982836bdc4e784fd37726fafc21951ab8c405e6ccec262af39d77cfd72e","sha512":"ed59631ff89a4ba5a3c684b4b22796fa1063db9b471e00f507ed33cbae5057aa1f57f2bc86a174836a7f3e58066d07c90c944e8894ecba1f107610eb59e85e20","ssdeep":"96:SK3hOG0MEQGpjjUDf67JoUDdS7iA/V4t+9O+g66aVhIKoQEZtk3vQrAiJuE6u:SK3J6jUDi7JpwWAN42zg66aV+7PG3vC5","tlshash":"e0c17d5722d0cffce17a17e453110ee77c621d98a292d5813a73e05aa59fa9993003d8","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-07-03T04:35:22.907066Z","times_seen":206,"resource_available":false,"data":null}},"time_used":4254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.648Z","timestamp":1782889809648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Oswald HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 01 Jul 2026 07:10:09 GMT\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1797,"size_decoded":1233,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6935270cbe7bf7b3212d51f3582a2af4","sha1":"09b01e6ca7abe871056181a763f1cf6df183cafd","sha256":"9bd52388b5ab746935d9be5f8bb33a5da893e97a3520c4a567153ad8af77233b","sha512":"befad05ae005d97ee75fc1864cd2d36ebe64aa7a0e0671e4de8f6a0980b38650478509a0d5b051f42bbb7034d395f6df65fd9663c065131818ab8cf90b4f11ae","ssdeep":"","tlshash":"9531bba2482b94806b4b1cc733de3d319a4ea216345589219ffd1c6cdcaae261319b9d","first_seen":"2025-09-11T19:44:11.722281Z","last_seen":"2026-07-03T04:04:33.903187Z","times_seen":5884,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":0,"dns":36,"connect":48,"send":0,"wait":64,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/favicon.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:14.643Z","timestamp":1782889814643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3680\r\ndate: Wed, 01 Jul 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3680,"size_decoded":3945,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"db1355deb1e0673c1a8afa1190bc81f5","sha1":"53de273aff68eea5c894eca997b83ad37f3207ab","sha256":"b6fe3b0ce5b1be1008d0acefd45c8f0306d56903c1ee27d4b92ce4adecff910e","sha512":"e3d16d470bf180131d5ae99416d14b238cb6b908a287574acc4245cb387dbd96889a7d4dcdec6e847a6635a5106b2447c650e03a193014ef66585218b352a311","ssdeep":"","tlshash":"4f716d9bd9dd8582a30eeaee77d2c0561099540bc290de0f6f03cd646a400026eff6e6","first_seen":"2023-07-17T18:30:40Z","last_seen":"2026-07-01T07:10:57.679226Z","times_seen":37,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-C7D7IPLZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:24.177Z","timestamp":1782889824177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/style-C7D7IPLZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nexustradeforgeso.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 07:10:24 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a39150b-8d34\"\r\nexpires: Tue, 22 Jun 2027 11:00:05 GMT\r\nlast-modified: Mon, 22 Jun 2026 10:57:15 GMT\r\nx-77-nzt: kzm+APKEIVha4hM8zfgRgJftQjEFYZ3mBeqVq9ZowZwwYdLDXoEJOgoVi01am5M6VqaekAE\r\nx-77-nzt-ray: e2f754201d1c9ec160bd446a5fb6a10a\r\nx-77-cache: HIT\r\nx-77-age: 763796\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36148,"size_decoded":8199,"mime_type":"text/css","magic":"ASCII text, with very long lines (36135)","md5":"a41094383649c1003556ef0599afd4fc","sha1":"3649509b0ec58e47b5a30523e597e96786c2b95c","sha256":"b960463003401b5f238074891f7c37cf2d1302eb9b105d60a25161914b8aee67","sha512":"7fcac7b5ef202e712563bcd23fb508ca596a95aa536607104dd060a8412cd1582c557c349d841f707c7e4d3800272b6c2685a01b98c0d0ae8643945cf49e635a","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+rZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XHcrNSN56DwQ43","tlshash":"aff2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-06-22T17:07:54.19771Z","last_seen":"2026-07-03T04:40:29.496738Z","times_seen":378,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T07:10:08.449Z","timestamp":1782889808449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 30 Jun 2026 09:41:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9791\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":39356,"size_decoded":10220,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1091), with CRLF line terminators","md5":"8dcffe25af6f28d86ce869823f7b504c","sha1":"219fe336804fa967f9cb343e99cc88a517b723ac","sha256":"805b8834716c5f40ff9be667ba6b1e9625283658672cd548245f39bb0d10cb43","sha512":"a1715da3c5056a219ac6265b273cc1c37e9430b2da521a32f609f3983a2ae6c1389962c8880323ecb4b7913f236dba90d20d5849955373ad165ef8372302344d","ssdeep":"768:W/osnh/8Wh3sWqdfinpBFZKq4E+9NfB2uldrzsA2ZKuW:WAsn9aXdqpfZKqQsA2kuW","tlshash":"000384147dcc98774127c2d790726748e1afea62e3138982b2fc177727a2e54ac0f95a","first_seen":"2026-07-01T07:00:21.508413Z","last_seen":"2026-07-01T07:10:57.681614Z","times_seen":2,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":119,"connect":368,"send":0,"wait":111,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/6981597591504.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.530Z","timestamp":1782889809530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/6981597591504.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-07-01T07:10:57.639016Z","times_seen":6879,"resource_available":false,"data":null}},"time_used":3130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-FggoWQFN.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:24.175Z","timestamp":1782889824175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:45 GMT","end":"Wed, 02 Sep 2026 14:34:44 GMT"},"fingerprint":{"sha1":"92:5D:A0:17:13:91:72:7B:B6:8C:6A:7D:A9:55:7F:C8:A9:47:11:99","sha256":"0E:FC:E3:4D:AD:32:B2:11:05:DC:E3:CD:CC:9E:10:DC:C5:2D:9E:1C:D7:C1:9C:00:92:15:43:C5:B7:0B:3A:D6"}}},"request":{"raw":"GET /assets/shared-FggoWQFN.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nexustradeforgeso.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 01 Jul 2026 07:10:24 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a39150b-42684\"\r\nexpires: Tue, 22 Jun 2027 11:00:05 GMT\r\nlast-modified: Mon, 22 Jun 2026 10:57:15 GMT\r\nx-77-nzt: k7qTvjZcBqMZSB4sNyCvG5OT5P8nwhLZziCSAor4pJyY8ARpdGQv9kMi7XiAlIi76QYnuxQ\r\nx-77-nzt-ray: e2f754201d1c9ec160bd446a561e870a\r\nx-77-cache: HIT\r\nx-77-age: 763796\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":272004,"size_decoded":92555,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44711)","md5":"d3b9ca5f9f3b05da0401449cc4db4f1a","sha1":"1aa8e99f1cfe2d6776fbae7ef2fde26b2b18db70","sha256":"da0316ae7fe87925382357385427467ab57c40fd0d8659988ebc9545bc3f1fe4","sha512":"4e972657231b7b56ec4f852a2a6e5d11bde9b12cf6a55a723095f48c0030dd66693b08b9b0a4a6f42699f80ee04604a2e0310d59e4dae291d29281028adc5110","ssdeep":"3072:7dkD8hG1K3qO0L+YIjJI4JvGuzJmiJvGIJ4zXwvzSiGrKt3z+F00x61GfNVsIcuR:k8hlqO0LQ7hjPGrKt3kfHsIcuwtkqnQ1","tlshash":"26443ad53294b03543db51e6906f1106f33e5c19580d812cf269ede678baec8a2b7fb8","first_seen":"2026-06-22T17:07:54.09355Z","last_seen":"2026-07-03T04:40:29.481306Z","times_seen":378,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery-ui.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.429Z","timestamp":1782889809429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /js/jquery-ui.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 120945\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":520714,"size_decoded":121270,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1002)","md5":"ab5284de5e3d221e53647fd348e5644b","sha1":"75c20acdc6cbc6334fe2b918ab7afeec007f969e","sha256":"4f455eb2ddf2094ee969f470f6bfac7adb4c057e8990a374e9da819e943c777d","sha512":"2462acc237c0063263b52527cfecbc5d4063065c0cd541cd966d9924dec0d9af475184f732c92af9269cb08df993896893eff37ad4b18598ca4b7af7b5f02742","ssdeep":"12288:1vemHFgymzYDdHCcmM2/W/CCeS/QRzbrVDDdRO2:vDdHCcmM2/W/CCeSIVDDdRO2","tlshash":"f3b4a6c9f39c266a867a32595c2e42cdb23c8075d600587fbc5d59dc29a883c43bbf79","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-07-03T04:09:41.905017Z","times_seen":16120,"resource_available":true,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":716,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/slick/slick.css","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.485Z","timestamp":1782889809485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /slick/slick.css HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 478\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1830,"size_decoded":786,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"68a281f599d6a4fa5e8cab54bc5f59fe","sha1":"515cb38cbd76ebee91d05f7544758f4eceaac07e","sha256":"1b786863757c336ef237105e2560e02e2e54b90781ecafb63732662caffe4cbb","sha512":"e001ba8f09719604413c08ad5aa641cc9a5fe286c2d049fa0e86e12972f3d0a72e2cbbb9322734766aaad2fd892ba98c8cc5c91a290da36dd9f36995fe861857","ssdeep":"","tlshash":"2e3119dc0152c5d68b3384444fd38649eeefa0930c241698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-13T11:05:16Z","last_seen":"2026-07-02T18:46:13.573686Z","times_seen":706,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/strong-security.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.520Z","timestamp":1782889809520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/strong-security.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3351\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3351,"size_decoded":3616,"mime_type":"image/png","magic":"PNG image data, 46 x 64, 8-bit/color RGBA, non-interlaced","md5":"c5176a720aee4031200cd255dcfc5959","sha1":"912fd949f3c7540f035120170b1d2f6780c94726","sha256":"1a1fe67bed27c4713182081a69310628d7fad29bf1dba94322572b112c7057d6","sha512":"ff745a62ab50fedc6d1bdf2cc42dbbb59db60d37a1553ac66bc8c9a5eaa5e377e1decf40c595627c0373ff4be992a9dfb314e7e8b7e9b6ba517d9dbef9aaaccd","ssdeep":"","tlshash":"91611a0bbc949942f15db3d208fb70b6f816148594e8c478f98f9c9274905abab6d1ce","first_seen":"2023-05-14T08:44:13Z","last_seen":"2026-07-01T07:53:02.594036Z","times_seen":343,"resource_available":false,"data":null}},"time_used":3139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3096,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/5511597007223.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.534Z","timestamp":1782889809534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/5511597007223.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2280,"size_decoded":1063,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"89f302862270de9d9dfc35e639c48264","sha1":"368e61d43e6603d14211097b425c927ece22a6b4","sha256":"e453805957dec692ac801b3b4474113d24fd7a8a9e582652aa72096d4f6d4035","sha512":"53b50a823c26ae73b96dcccd76d97635f25cfaa1134a993baca92a9868409b65befd26f911da7e9647b1fa986e70cf2095b34b2274a38e3c68dc485fc4138820","ssdeep":"","tlshash":"0641949e54f641012713d39179f671089c91014bf7daad40b87e84289fc8e56d8e3bac","first_seen":"2026-07-01T07:10:57.689646Z","last_seen":"2026-07-01T07:10:57.689646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4281,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/dotted-world-map-vector-1.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:11.782Z","timestamp":1782889811782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/dotted-world-map-vector-1.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41091\r\ndate: Wed, 01 Jul 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41091,"size_decoded":41357,"mime_type":"image/png","magic":"PNG image data, 1000 x 600, 8-bit/color RGB, non-interlaced","md5":"53c92f8675bcfa038f2311450e460ea2","sha1":"1f971425afb157fc3d50d03870d74067f300c97a","sha256":"6f51b25246871a0f5730eb52959d16f90c7260444836a00881608c6859e01110","sha512":"0d7f00d4d22d0fe528eb6626b0a7340549cd01c101e7e64ea32cb2270d59aa21d7fa583a59c6c59310bfcaa6fd2f94bfecf0ccd81df6f698f7305621a52970e7","ssdeep":"768:kN/3JiODh2OIeQ32F1rmKLr50yfKrMyDy5lnOV6kHufqNT:YLE3YOmKgyDyXMFufqp","tlshash":"2703e1682574e2b4b80243719a177d8f0e666cf4c0c592abcb3963ac2cb7c76179786d","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-07-01T07:53:02.564352Z","times_seen":104,"resource_available":false,"data":null}},"time_used":3446,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3121,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"51.102.79.203","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:25.181Z","timestamp":1782889825181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nexustradeforgeso.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: WvBriZS+appxztPOatHXdg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 01 Jul 2026 07:10:25 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: jZBhpsXVkhP1az6N6Q5bcMolu/w=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T05:08:23.454468Z","times_seen":16932790,"resource_available":true,"data":null}},"time_used":1104,"timings":{"blocked":0,"dns":357,"connect":364,"send":0,"wait":328,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/jquery.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.428Z","timestamp":1782889809428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 31985\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93068,"size_decoded":32309,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32132)","md5":"0652da382b6fceb033dfe2b6c06d4d11","sha1":"002da8cbe90fcf32fbdebb72386125079e3805ee","sha256":"7fa0d5c3f538c76f878e012ac390597faecaabfe6fb9d459b919258e76c5df8e","sha512":"b329c7b3eacb836583544f54d281d52544430a2a9fb7ad06716396eed5f24b2f2822bd078e5dcaf60bfb06afe04a3e0d0d5a5ce6f9ac364306189eadd95a5430","ssdeep":"1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTdl:fY8MaW2b+UELKTqnAdiq","tlshash":"6f9308ddb1c5b02287bb71a950af540bf236195e280c4450f268d8f9fc74a4ea27bf6d","first_seen":"2023-03-07T01:03:49Z","last_seen":"2026-07-02T23:27:13.227323Z","times_seen":4653,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":358,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/world-coverage.png","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.522Z","timestamp":1782889809522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/world-coverage.png HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3921\r\ndate: Wed, 01 Jul 2026 07:10:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3921,"size_decoded":4186,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b278a9ca96487f885ce54e83a91d18df","sha1":"293a0cca75816f14bb6e6fec79538bcce279291f","sha256":"e34c25320923a041bb5365fc894419f86fdaacf4fca7676a3d3bc5a24fa9be48","sha512":"7f79c4f4c5d02ea2db5ef99125bee57e26b8fe3f199c9b7867c7965e86cd7485a43c7ffe4d2dee33ce45068d02099a7970de50d196f0bc7fdc457dd354104144","ssdeep":"","tlshash":"6d814b4afb322442d24cdc8336e9906acbc41588e0f5e197f9cfd827e9a531a590c7cb","first_seen":"2023-04-19T08:16:23Z","last_seen":"2026-07-01T07:53:02.566288Z","times_seen":342,"resource_available":false,"data":null}},"time_used":3247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3095,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/fonts/museo-sans-300-italic-webfont.woff","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:10.427Z","timestamp":1782889810427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /fonts/museo-sans-300-italic-webfont.woff HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/css/main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:10 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39606\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39606,"size_decoded":39872,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 39606, version 0.0","md5":"ace543631fab4cb1f7178b64c7e95123","sha1":"106a9fa2352a8b1387c1a9abef41efa3e7671789","sha256":"e02a6905cc7f96e588007fdc8b0fe9d0a320ba243017c2c6ce99ff29202e3d7d","sha512":"d3acbd7482e3561a476af987bd86968acaf6540b1d72aa898bcbd06cdc3b32abc20d2c3b7da355b8fef4998574064b0eb951360613c295fb6488d7f8e5843d5e","ssdeep":"768:yWiGDKYWsjOkroGlgOxjrFwcQXKU4b7DD+7YhPw:yWiyKSrdFKX34b7H9I","tlshash":"6a03f16c6c413f8bc6b7867ac3136f480d140359a21ad0972bcbe7e39b62b727e51647","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-07-01T07:53:02.625805Z","times_seen":107,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":347,"receive":563,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/js/select2.min.js","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.502Z","timestamp":1782889809502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /js/select2.min.js HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20165\r\ndate: Wed, 01 Jul 2026 07:10:11 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77519,"size_decoded":20489,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62922), with CRLF line terminators","md5":"2b338d04357020cd5b4e5ac7f072203a","sha1":"f89637916296bcc140316bee408ffe5c3761bcea","sha256":"2ed33d2f001627136dfb0eeb53a317f1697bdfba2f5c4c41c991e44af4e590a0","sha512":"7e443df43a27853f4003979ad87cf066e67a0bff956ed5d19914d6fcc38beb980f83c2fb2b5b579d7f0c07bb39af3ac7b6557b796c8b269e39201bced295ddff","ssdeep":"768:feozhXg5pTFxxoiQduQLCyXiXCYGbk0QTeeUBo47RTeqX5+nZprIf/ny0RfS9KH+:Zx2xOiQduE88QSkqJKHrAvf2KHHe","tlshash":"0473c94db953723545bf21e6607f010a723a9b7e600589acb468c9d879bfc15322bf3e","first_seen":"2025-12-11T04:11:57.27141Z","last_seen":"2026-07-01T07:10:57.701602Z","times_seen":9,"resource_available":true,"data":null}},"time_used":2194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2065,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/uploads/small/4111597591055.html","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.532Z","timestamp":1782889809532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /uploads/small/4111597591055.html HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Mar 2025 21:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 01 Jul 2026 07:10:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-07-01T07:10:57.639016Z","times_seen":6879,"resource_available":false,"data":null}},"time_used":4263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/images/Bitcoin-12.jpg","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:10.817Z","timestamp":1782889810817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /images/Bitcoin-12.jpg HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49045\r\ndate: Wed, 01 Jul 2026 07:10:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49045,"size_decoded":49312,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 640x639, segment length 16, comment: \"Lavc55.18.102\", baseline, precision 8, 852x480, components 3","md5":"26a8547e1eda21f830293fd63ae75953","sha1":"a6b1ba16140da3470e5f7b073837d5fa1a8e26cc","sha256":"ca7fc0f2644535087def2d4f2504d1c450fa4212aaf3e7c669773d1909783ca6","sha512":"84ee842a33c5752bf6194267020d7c970bde702d46eff4957b1e83b3d7333a1db874f2d9c2bf5bb33883a4ea38d55f08cc4ee6f5f132c4f12187acda54276f70","ssdeep":"768:q+ChGoW5U55Zokd/+vcIjfTERkswtO4aEt3VARVWiWbALvoleS7CDwBT+SQL2AFy:q+je5oG+0Ij7EWsw04BJGRVWiqleSOcl","tlshash":"6223026d4a8bc6b12215ce76928f9fcde27ddc490d8c2d20a572a5ec36a2312017672f","first_seen":"2023-05-29T22:54:10Z","last_seen":"2026-07-01T07:53:02.621823Z","times_seen":78,"resource_available":false,"data":null}},"time_used":4533,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4233,"receive":300,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/css/animate.min.css","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.426Z","timestamp":1782889809426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /css/animate.min.css HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3148\r\ndate: Wed, 01 Jul 2026 07:10:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41626,"size_decoded":3457,"mime_type":"text/css","magic":"ASCII text, with very long lines (41626), with no line terminators","md5":"90dfdc0d2b77dabac8cd9afdb19e4385","sha1":"71200fae11e960fc37e95ad961384e91da162dec","sha256":"acd4dcf96c8b5f8b2ff506897cbc8f07ba0d30248b6f19b58c66d5a70f132821","sha512":"c327d4c4a089aa54c53dcf6a272df6f00c91de0d1c63c9bfcd0e9240974303540c57e656447291b6686ff78ea28e9799504c85a73a387482d95ed928693fb4b2","ssdeep":"192:1bcxbwdOslxFG5wQ1oASkND/3fyx5PrYee0nTv:/OqG5wQ1oASkND/3fyx5PrYee0nTv","tlshash":"451387aa48e1228554260e55cbcc8fa84b3dc76764b14cdf3396384f8741bae23de767","first_seen":"2023-04-05T07:49:39Z","last_seen":"2026-07-01T07:53:02.612935Z","times_seen":687,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexustradeforgeso.com/css/modal-video.min.css","fqdn":"nexustradeforgeso.com","domain":"nexustradeforgeso.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexustradeforgeso.com/","date":"2026-07-01T07:10:09.493Z","timestamp":1782889809493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexustradeforgeso.com.axicorviasavebk.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Jun 2026 06:11:04 GMT","end":"Mon, 28 Sep 2026 06:11:03 GMT"},"fingerprint":{"sha1":"96:A5:AA:0D:9A:97:A0:A0:39:53:DF:AC:59:F7:87:5C:B1:38:CD:97","sha256":"E5:B0:EE:42:FE:AA:9E:A5:E6:EF:09:D4:71:57:E6:84:98:60:CE:0A:32:0E:2D:10:F9:4D:16:28:98:30:6A:38"}}},"request":{"raw":"GET /css/modal-video.min.css HTTP/1.1\r\nHost: nexustradeforgeso.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexustradeforgeso.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 08 Jul 2026 07:10:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 30 Dec 2024 09:53:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 508\r\ndate: Wed, 01 Jul 2026 07:10:10 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2069,"size_decoded":816,"mime_type":"text/css","magic":"ASCII text, with very long lines (2068)","md5":"600a28ccac67fe6edd2f9d19f3d84ba1","sha1":"e53bb05eff5c08fd76e6c8fb3b1023a5038c09b9","sha256":"a6bb15a4ba4beb9df438b7a9d80fabb63b8133c414b993b355cab1a2d22c933b","sha512":"2f4f5667216a6f9a08844cebda4df778757fe614992ec1b6347bda57fc82f1b76b5b53a965d4890218ee3fd3454866c5083ef6aadf402894d43cb96ab6f11387","ssdeep":"","tlshash":"50416e998d143155907bc346abc74b68073cc2e174310ede735b195f8ad628c62be685","first_seen":"2023-04-09T15:38:40Z","last_seen":"2026-07-03T04:35:22.812397Z","times_seen":593,"resource_available":false,"data":null}},"time_used":1274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"nexustradeforgeso.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}