{"report_id":"68ca4880-b981-42e1-91cb-26502971d07d","version":6,"status":"done","tags":[],"date":"2026-01-02T16:00:22Z","url":{"schema":"http","addr":"nexpilotfinance.store/","fqdn":"nexpilotfinance.store","domain":"nexpilotfinance.store","tld":"store"},"ip":{"addr":"217.160.0.110","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"nexpilotfinance.store/","fqdn":"nexpilotfinance.store","domain":"nexpilotfinance.store","tld":"store"},"title":"nexpilotfinance.store/","dom":{"size":1162,"mime_type":"text/plain; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"819d9148615d2b9a9180917873a79f9b","sha1":"eda04b07b778b3bfd1307b5ec0d3234043bc133b","sha256":"147a1d6c12c86640cda099a35fdba5096225b1f1ac9b06f4565c3bdd4ac8fbb4","sha512":"0666beb72caea064fc78c503679244fc699b8dc9aaf961865c954c7f228148481b341d82407c0a3d7d8b59480ab5e7daff703e93ddf0694661344d4865e0acc2","ssdeep":"","tlshash":"a821e9378469055f10ad2fd014a5a0ce2976b8ba3dc107b85f73c5bf2c12ab340709fa","dom_hash":"domhashb9b1303a0a0f0d54bee68d9c8663835e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexpilotfinance.store/","fqdn":"nexpilotfinance.store","domain":"nexpilotfinance.store","tld":"store"},"ip":{"addr":"217.160.0.110","port":0,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T16:00:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"nexpilotfinance.store","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cors.uicdn.net","ip":{"addr":"217.160.86.60","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"2010-08-25","domain_rank":3308703,"first_seen":"2016-06-07T11:26:19Z","last_seen":"2025-12-30T00:56:10.171054Z","alert_count":0,"request_count":5,"received_data":88433,"sent_data":2285,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"nexpilotfinance.store","ip":{"addr":"217.160.0.110","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"domain_registered":"2025-11-14","domain_rank":0,"first_seen":"2026-01-02T16:00:23.16764Z","last_seen":"2026-01-02T16:00:23.16764Z","alert_count":4,"request_count":4,"received_data":1819521,"sent_data":1639,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"nexpilotfinance.store/","fqdn":"nexpilotfinance.store","domain":"nexpilotfinance.store","tld":"store"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49fb6bdcfa9d0e9821042d9665de1dd3","sha1":"8f2cebc9b0cbb3242a4a645a7b23eb41d546d067","sha256":"fb834290e02bb6443642f805b2569b9fefe7fb1971a861bcad216573b289a6fe","sha512":"9dc1d8ded52d3b566e55921d87144634f0aaabbbeeb237cf225839fdb3801977903c5aaa73176434959f2d62df980e4362685dc652cd672e0f6e1a851e6790bb","ssdeep":"","tlshash":"87d02b15b170913b827ba1f653efa7c435301059a881055a0aacce894e25cb81751ddd","size":263,"data":"","first_seen":"2023-10-26T22:46:50Z","last_seen":"2026-04-04T20:22:34.8889Z","times_seen":1329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"cors.uicdn.net/fonts/opensans-semibold-subset.woff2","fqdn":"cors.uicdn.net","domain":"uicdn.net","tld":"net"},"ip":{"addr":"217.160.86.60","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://nexpilotfinance.store/","date":"2026-01-02T15:59:58.896Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/opensans-semibold-subset.woff2 HTTP/1.1\r\nHost: cors.uicdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://nexpilotfinance.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://nexpilotfinance.store/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 02 Jan 2026 15:59:59 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 16692\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nSet-Cookie: DPX=v1:9L8UobRI3Y:yMj4lGVQ:6957f993:gb; Path=/; Expires=Fri, 02-Jan-26 16:59:58 GMT; HttpOnly\r\nServer: Apache\r\nLast-Modified: Tue, 30 Oct 2018 10:09:16 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=31536000\r\nExpires: Sat, 02 Jan 2027 15:59:59 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16692,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16692, version 1.6554","md5":"8d9dd557871cae149375bced8f09979f","sha1":"1b2f8745d9c0a10b99129ebfd4de663a32985759","sha256":"afb8ed7e96aec91cb49da50382800ef7c26eda95cbd2b10e0fcdc71bf8943d3c","sha512":"a5336dc163d1bdd782f30012796d4e7c33eb0e4aa0baf4f874ffedfe419248e0bd349fdcaab2cbbfb5ea1ebd119d5270cd10f7af25a07a42ba196105d8254cbd","ssdeep":"384:trLxxV9F9EagSKFG5Bo6uj+nAABLrVzAQ0RXU1Tv0QkBGsWjdP9Iua/i0Gh9:9Fu/FG5Bo6fhV8pXA8DBGnjstK0Gh9","tlshash":"a072c05b14c360d3fd8553999dea3aa7d4bc3832137b761950365e880a8fd59c22fc2a","first_seen":"2023-05-01T16:34:22Z","last_seen":"2026-04-04T21:04:09.863899Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":65,"dns":49,"connect":20,"send":0,"wait":112,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cors.uicdn.net/fonts/opensans-bold-subset.woff2","fqdn":"cors.uicdn.net","domain":"uicdn.net","tld":"net"},"ip":{"addr":"217.160.86.60","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://nexpilotfinance.store/","date":"2026-01-02T15:59:58.894Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/opensans-bold-subset.woff2 HTTP/1.1\r\nHost: cors.uicdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://nexpilotfinance.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://nexpilotfinance.store/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 02 Jan 2026 15:59:59 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 15732\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nSet-Cookie: DPX=v1:V78G3XJE1x:uMukaFwS:6957f993:gb; Path=/; Expires=Fri, 02-Jan-26 16:59:58 GMT; HttpOnly\r\nServer: Apache\r\nLast-Modified: Tue, 30 Oct 2018 10:09:15 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=31536000\r\nExpires: Sat, 02 Jan 2027 15:59:59 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15732, version 1.6619","md5":"5da429e9b4acba67c986232ae06a2516","sha1":"1513cb7fa1f25de334c50d2aa62250d672907beb","sha256":"67c85736886a8a7c3f8039d4132c3da9f01936bf1cd871d07e39ce926b141af4","sha512":"a685dc222c757af3536e94691abf6a6278ab8c2e3e61c0f011601b5f9d1cfdecdbc6792d5171a6e893cebf83bcb879fb8412250527de39b7b8fb4398c386ded4","ssdeep":"384:aYds4jiZDera4TR0XiUdS8copcLTKK1nQW:aB4WJia4cSH1V","tlshash":"7562d1206becf165c5ddd1eb9b316ede0dcaaf42e1c07e08d99406e84af5d3100b1ea2","first_seen":"2023-05-01T16:34:22Z","last_seen":"2026-04-04T21:04:09.867723Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":66,"dns":51,"connect":19,"send":0,"wait":101,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"nexpilotfinance.store/favicon.ico","fqdn":"nexpilotfinance.store","domain":"nexpilotfinance.store","tld":"store"},"ip":{"addr":"217.160.0.110","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nexpilotfinance.store/","date":"2026-01-02T15:59:59.102Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nexpilotfinance.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://nexpilotfinance.store/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-WS-RateLimit-Limit: 1000\r\nX-WS-RateLimit-Remaining: 998\r\nDate: Fri, 02 Jan 2026 15:59:59 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":606275,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57087)","md5":"bbe31ac0df74c25efc8216d11bbf39c0","sha1":"decaa9cadd89e8ba350ab7e6b9312f1da1258c79","sha256":"0146945be9749df7ee068fcadf494ed94ee33639ffed002f2f6fb8729b554c2c","sha512":"6a9ac51da60a300e990333c753012ddfb1dab7d8dbb7ba8cf800e0a411fdbb6d3f126ad0fbe4c8196ff870f60bbc663c4bd1a477d8d135b82a03f79cea7e3d0f","ssdeep":"6144:YYuR6UfG8hes8KKjhAkdkzsD+vPAeJoSQn5NClLFS:tPeJojnH","tlshash":"dcd45392b1861858d3b7cd8bb581b6b9ad9a59018b860cdff0c7bb5c4fd278603907dc","first_seen":"2023-10-26T22:46:50Z","last_seen":"2026-04-04T20:22:34.879655Z","times_seen":1336,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":1,"connect":33,"send":0,"wait":92,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"nexpilotfinance.store","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexpilotfinance.store/","fqdn":"nexpilotfinance.store","domain":"nexpilotfinance.store","tld":"store"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T15:59:57.628Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: nexpilotfinance.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T22:47:04.158538Z","times_seen":13349726,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":138,"dns":0,"connect":33,"send":0,"wait":0,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"nexpilotfinance.store","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"nexpilotfinance.store/","fqdn":"nexpilotfinance.store","domain":"nexpilotfinance.store","tld":"store"},"ip":{"addr":"217.160.0.110","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T15:59:57.852Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: nexpilotfinance.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-WS-RateLimit-Limit: 1000\r\nX-WS-RateLimit-Remaining: 999\r\nDate: Fri, 02 Jan 2026 15:59:58 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":606275,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57087)","md5":"bbe31ac0df74c25efc8216d11bbf39c0","sha1":"decaa9cadd89e8ba350ab7e6b9312f1da1258c79","sha256":"0146945be9749df7ee068fcadf494ed94ee33639ffed002f2f6fb8729b554c2c","sha512":"6a9ac51da60a300e990333c753012ddfb1dab7d8dbb7ba8cf800e0a411fdbb6d3f126ad0fbe4c8196ff870f60bbc663c4bd1a477d8d135b82a03f79cea7e3d0f","ssdeep":"6144:YYuR6UfG8hes8KKjhAkdkzsD+vPAeJoSQn5NClLFS:tPeJojnH","tlshash":"dcd45392b1861858d3b7cd8bb581b6b9ad9a59018b860cdff0c7bb5c4fd278603907dc","first_seen":"2023-10-26T22:46:50Z","last_seen":"2026-04-04T20:22:34.879655Z","times_seen":1336,"resource_available":true,"data":null}},"time_used":862,"timings":{"blocked":33,"dns":1,"connect":34,"send":0,"wait":672,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"nexpilotfinance.store","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cors.uicdn.net/fonts/overpass-bold-subset.woff2","fqdn":"cors.uicdn.net","domain":"uicdn.net","tld":"net"},"ip":{"addr":"217.160.86.60","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://nexpilotfinance.store/","date":"2026-01-02T15:59:58.893Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/overpass-bold-subset.woff2 HTTP/1.1\r\nHost: cors.uicdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://nexpilotfinance.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://nexpilotfinance.store/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 02 Jan 2026 15:59:58 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 18948\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nSet-Cookie: DPX=v1:rsEwBuQkGG:UlOgsAJ5:6957f993:gb; Path=/; Expires=Fri, 02-Jan-26 16:59:58 GMT; HttpOnly\r\nServer: Apache\r\nLast-Modified: Tue, 30 Oct 2018 10:09:16 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=31536000\r\nExpires: Sat, 02 Jan 2027 15:59:58 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18948,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18948, version 3.0","md5":"8684d6a08c252828e46245e7295b1ae7","sha1":"24a65ff1dcecac5186429689dc173561669194e5","sha256":"4ebc32996197900b957b42cf88251e1b2868f835ecae62c71a4ee11552318aa1","sha512":"a0c176ad986dc4fb7a9b77c8fcec60514f96f204bbb73336cc3834acb20ec66108b0cea15021760454608cd05781e39202d5c0584eea8e761d0977e9ed28ed00","ssdeep":"384:Ezf+ppYCqYnyBbunx7A2N9pvkEsVGB+xuYzXJlM7PojbSU:axCTyBbuxbbpvdTeuYzJ0Pm9","tlshash":"f582d0ce159c1a7b4bab1b22c56bb81c1581707fd2f8f78fa6de2041cb9a447981e713","first_seen":"2023-05-01T16:34:22Z","last_seen":"2026-04-04T21:04:09.866336Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":68,"dns":55,"connect":19,"send":0,"wait":65,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cors.uicdn.net/fonts/overpass-regular-subset.woff2","fqdn":"cors.uicdn.net","domain":"uicdn.net","tld":"net"},"ip":{"addr":"217.160.86.60","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://nexpilotfinance.store/","date":"2026-01-02T15:59:58.902Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/overpass-regular-subset.woff2 HTTP/1.1\r\nHost: cors.uicdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://nexpilotfinance.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://nexpilotfinance.store/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 02 Jan 2026 15:59:59 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 18844\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nSet-Cookie: DPX=v1:y8Fgk65yoD:Pckp8Osb:6957f993:gb; Path=/; Expires=Fri, 02-Jan-26 16:59:58 GMT; HttpOnly\r\nServer: Apache\r\nLast-Modified: Tue, 30 Oct 2018 10:09:16 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=31536000\r\nExpires: Sat, 02 Jan 2027 15:59:59 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18844, version 3.0","md5":"a16b9ab388314076b7d485d6e95e4c5f","sha1":"4c2475c054d21a689f44333d52d3fcdedad703de","sha256":"37785c00f24aae7c09be9017dc2e12760b1b0cf69fea8ab8aa208734be5c22db","sha512":"987e54075340e5d4c8b3e980523a823bd634ba2d95fb25d83accb7add8e66153427fdb573ef60b3389a9362a1ef5ba0c28bc6dd499c3a91b5d18f9835fb97327","ssdeep":"384:MiGMygfughz0kTrWP38gvLKXHJqDip5rmajKxkF9f7o3b896YycU7ndm/qNTwH:xughztTiv8gvWX0DC1NMejoRYLSMH","tlshash":"0582d16cf1627857ae2941fe72b8333dede004bf49a625b1890d025887a4e524abd15f","first_seen":"2023-05-01T16:34:22Z","last_seen":"2026-04-04T21:04:09.874996Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":59,"dns":40,"connect":20,"send":0,"wait":100,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"nexpilotfinance.store/apple-touch-icon.png","fqdn":"nexpilotfinance.store","domain":"nexpilotfinance.store","tld":"store"},"ip":{"addr":"217.160.0.110","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://nexpilotfinance.store/","date":"2026-01-02T15:59:59.100Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: nexpilotfinance.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://nexpilotfinance.store/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-WS-RateLimit-Limit: 1000\r\nX-WS-RateLimit-Remaining: 999\r\nDate: Fri, 02 Jan 2026 15:59:59 GMT\r\nServer: Apache\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":606275,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57087)","md5":"bbe31ac0df74c25efc8216d11bbf39c0","sha1":"decaa9cadd89e8ba350ab7e6b9312f1da1258c79","sha256":"0146945be9749df7ee068fcadf494ed94ee33639ffed002f2f6fb8729b554c2c","sha512":"6a9ac51da60a300e990333c753012ddfb1dab7d8dbb7ba8cf800e0a411fdbb6d3f126ad0fbe4c8196ff870f60bbc663c4bd1a477d8d135b82a03f79cea7e3d0f","ssdeep":"6144:YYuR6UfG8hes8KKjhAkdkzsD+vPAeJoSQn5NClLFS:tPeJojnH","tlshash":"dcd45392b1861858d3b7cd8bb581b6b9ad9a59018b860cdff0c7bb5c4fd278603907dc","first_seen":"2023-10-26T22:46:50Z","last_seen":"2026-04-04T20:22:34.879655Z","times_seen":1336,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"nexpilotfinance.store","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"cors.uicdn.net/fonts/opensans-regular-subset.woff2","fqdn":"cors.uicdn.net","domain":"uicdn.net","tld":"net"},"ip":{"addr":"217.160.86.60","port":80,"asn":8560,"as":"IONOS SE","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://nexpilotfinance.store/","date":"2026-01-02T15:59:58.890Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/opensans-regular-subset.woff2 HTTP/1.1\r\nHost: cors.uicdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: http://nexpilotfinance.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://nexpilotfinance.store/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 02 Jan 2026 15:59:59 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 15972\r\nConnection: keep-alive\r\nKeep-Alive: timeout=15\r\nSet-Cookie: DPX=v1:eb2diJHFl3:yCKAEnyr:6957f993:gb; Path=/; Expires=Fri, 02-Jan-26 16:59:58 GMT; HttpOnly\r\nServer: Apache\r\nLast-Modified: Tue, 30 Oct 2018 10:09:15 GMT\r\nAccept-Ranges: bytes\r\nCache-Control: max-age=31536000\r\nExpires: Sat, 02 Jan 2027 15:59:59 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15972,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15972, version 1.6554","md5":"9a4a59644da7d2f7e0ae8211fe920834","sha1":"b81dcb362233c279a82840e072374d59f73042ce","sha256":"3360197ae195a91d9ed3bd45ef09a8de4e10a247bd84abf0e91a99e9b3af3837","sha512":"e04a748e64286595205b3160eecf6c7116f98af6dd9ff50f70a22dfc7472aaf739d1b020dc3ee53615b760df098cb7be2e46e23a6237565319bcc4a51d714b45","ssdeep":"384:IDEffUb/B8jBNQn3sywEdtzqVL2wRkPtluDiPLaoj9AtvovoNla:7cjB8jBJywHVxSPtMDseojWtvswa","tlshash":"3872cfe6d202eea4f1c37777ac2ed18b109bd1e19541f434d9bce1800398f699c1673a","first_seen":"2023-05-01T16:34:22Z","last_seen":"2026-04-04T21:04:09.874393Z","times_seen":1796,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":70,"dns":56,"connect":19,"send":0,"wait":78,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}