{"report_id":"738911b9-df64-49d7-a2eb-4f6d6f584967","version":6,"status":"done","tags":[],"date":"2026-01-28T05:55:36Z","url":{"schema":"https","addr":"reward-nexira.app/","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":"app"},"ip":{"addr":"172.67.140.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"reward-nexira.app/","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"title":"Reward Central","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T11:31:27.481734Z","times_seen":17917872,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"reward-nexira.app/","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":"app"},"ip":{"addr":"172.67.140.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T05:55:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"reward-nexira.app/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"reward-nexira.app/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null},"summary":[{"fqdn":"reward-nexira.app","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":15,"received_data":4667163,"sent_data":6946,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.nexira.ai","ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-25T15:13:13.036038Z","last_seen":"2026-01-25T15:13:13.036038Z","alert_count":0,"request_count":12,"received_data":193134,"sent_data":5707,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.nexira.ai","ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-25T15:13:13.039642Z","last_seen":"2026-01-25T15:13:13.039642Z","alert_count":0,"request_count":3,"received_data":30155,"sent_data":1563,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"reward-nexira.app/","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2fbedb0b3347993aaffda511427d5ef7","sha1":"e20ab6a72f14d0d94e111b2f7b05c3260c936a07","sha256":"0d5314efb310b706bb73a055d0863a287a2636eb5e9eceae221a74a5895a94ec","sha512":"252650d07bdc4223ba829bba1298a0effa6d343cbc58d9651350bb49138d3baa710235fbc428fbc8f5b783f8531f4527b67751143b72a75790efe8f217e525b2","ssdeep":"","tlshash":"ce01f65d27f332b9627f2162d2038489be50506370dadc49741c91894fd6e6464de69a","size":657,"data":"","first_seen":"2025-06-07T13:25:17.713531Z","last_seen":"2026-02-14T08:22:12.898758Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/85597dbf-69dc-4650-a875-edfd57c476eb","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-13T18:03:54.375268Z","times_seen":5113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-08-16T09:03:58.854852Z","times_seen":1983,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/orion.js","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","size":107989,"data":"","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"reward-nexira.app/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7cedee5f4aabfe0f0a25596641b0073","sha1":"9e90df4076abbd3350295826c5ad3ec1856ffd56","sha256":"c2e60dc68f09c70895f8cb98a4a88e16cf3c691d5a96b9c93c3aab931eafc258","sha512":"17dc0e86fcd7af709d5ffb50d255169d2300566d30c2da4345505703e6a6ebf303df263db9561688753bc03af86b134ccfa9f763966f8612ef554be796d6c025","ssdeep":"1536:jQe6pw4biVcuVXdWAgB1PusH2DY7sX3lX56oH:Me6KBVcuVtWAgR2Do2X6oH","tlshash":"7fa340d59a4bd0e08e5a11edd077ed0ae0281aa3cdacf193b92cded1355df22c84753a","size":104467,"data":"","first_seen":"2026-01-07T13:23:26.460119Z","last_seen":"2026-02-14T09:07:38.76649Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"reward-nexira.app/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"reward-nexira.app/Inter.css","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /Inter.css HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2174\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FacKCj%2FnDmJI5auE556DYaeqCG34AAQwS1uI62ZWZaHMSJB4DI6nj5w8jTpMSkmv9kfLWjyzfvjRMlp9KxomnJX%2F%2F9FapBbFivkzIX6oQg%3D%3D\"}]}\r\netag: W/\"6978815a-4ca\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d610cdbb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1226,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"779f03382cffc7a0867d4e9daf7929d1","sha1":"c8ecdf318e8c6708a411e641fd4558cf638fab64","sha256":"274c243bbb794f6a9a48d28d3a0494f021ed3d333e97d5feb4c63f45079b4625","sha512":"c0350fee46134f4ecf5e690ffc4378fe7fec8dd0fcda0d91ffb7ae63b65ba61ff32616c6fdb892fd2bf12b23a6e2dc18a478a36a4d5c0288e6f2174ee863a53f","ssdeep":"","tlshash":"da21fc211d9f5914c9255ee977af7f3aac0d1889640de85f1ba01c524cdfa3c93a0f4e","first_seen":"2026-01-28T05:19:28.020341Z","last_seen":"2026-01-28T05:55:41.03581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/century.css","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /century.css HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2173\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=292ZzS9a8EkYHX1P4T0h0uKlAXccny0N4%2FJ4jvdLabATKrzeLHDkDpL44m38nqMevWa66Svlooaq8h5gm5OkPee8pdT%2Bf1UbS3J%2BBNbGYg%3D%3D\"}]}\r\netag: W/\"6978815a-1ea\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d610cddb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":490,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6c3303d1995eedf7a9bdfb83dfeae1cb","sha1":"0f0d237c84bb2fad6202e91875f64ab23092fb56","sha256":"4f5d06ed6d668d0881a80af7369f1b319c1131737f74ec0dd5bc0de701fbd0ea","sha512":"7be821bfaf4411569c839714e1a97034b2803676ca0916aa74e41c60e31e303fe24f3b75a218f4cea8730dff31a37cf7c74d2d9f01160948dc42514b0c210dde","ssdeep":"","tlshash":"77f08c11098b4838a9239d9b37afbf3a980d1807384da99f17601ce54edab3d8310f4d","first_seen":"2026-01-28T05:19:27.968297Z","last_seen":"2026-01-28T05:55:41.036652Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/social/x.svg?w=16\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/social/x.svg?w=16\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 373\r\nlast-modified: Tue, 27 Jan 2026 02:17:00 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 04:05:42 GMT\r\netag: \"64afce8643e1b68eee7107bf1c5fd04c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sCxtD7mfXS3Sjyr90YiyEBidZ5x8iHyLGPbBVBZoXVxeLhFBAP8INw==\r\nage: 6572\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":373,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64afce8643e1b68eee7107bf1c5fd04c","sha1":"db09e5040d227f5c0873151a5f7f012b3da02509","sha256":"83cd06cbbd757b2acbf185e7258d56c1ad6768e38fbcbb5dcb3fd25b4c9a6ec4","sha512":"b774f34f8cfa7a2874979ec92dab953d8886fb3bbc9465f6e688806914a06ad54b5f52beb5b3c33a5df1c75a64d5634a780d8f485739f0cf34a9b43811b2d840","ssdeep":"","tlshash":"79e061e05068ce46d00e9030e73c1652a43790d6e24c0de966517558fc945914559dda","first_seen":"2026-01-28T05:19:27.989089Z","last_seen":"2026-07-19T03:58:03.057767Z","times_seen":8,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":28,"dns":24,"connect":6,"send":0,"wait":3,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/social/instagram.svg?w=16\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/social/instagram.svg?w=16\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 Jan 2026 02:16:59 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 04:05:41 GMT\r\netag: W/\"75c2bf76171e53c64490e854f75dcc6c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7hIIfXpjfLEYgbsLtwElpJiChOYe7heKkkYZa1T_mKvj5EDetL04tw==\r\nage: 12938\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2108,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75c2bf76171e53c64490e854f75dcc6c","sha1":"5bde1cdfd83f20ec578954f7347a752e94d959a3","sha256":"e6a4f42f0b197efeb9395359209b2d416d17e73e9cc2994dc99a610ceb46383d","sha512":"21cd63aece514606e74c8ec97ac13da1172fee9b93c0267b2d848bf916ec808a3a9a246b2b9148559264ad23e6a71b4c67d3b65a91a5c390f44daccfddcd61d2","ssdeep":"","tlshash":"cd4101fbf39874f0a487df259923b8f5858f20f67e41d3c4886ade59e610199400cd18","first_seen":"2026-01-28T05:19:27.995202Z","last_seen":"2026-01-28T05:55:41.038017Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nexira.ai/fonts/rajdhani/Rajdhanisemibold.woff2","fqdn":"www.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:15.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nexira.ai","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 02:38:44 GMT","end":"Sun, 29 Mar 2026 02:38:43 GMT"},"fingerprint":{"sha1":"40:7B:79:F9:B5:4D:F1:75:1F:84:66:01:A3:9A:4B:3A:80:A4:C6:5D","sha256":"89:6E:21:C8:27:34:4D:26:7B:04:44:66:05:E0:76:F2:D3:89:B4:3E:3B:79:17:63:56:0C:9A:56:12:00:17:66"}}},"request":{"raw":"GET /fonts/rajdhani/Rajdhanisemibold.woff2 HTTP/1.1\r\nHost: www.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://reward-nexira.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 98866\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Rajdhanisemibold.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 28 Jan 2026 05:55:15 GMT\r\netag: \"3dc147db1fa279ae9edd624869716a91\"\r\nlast-modified: Tue, 27 Jan 2026 02:27:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-frame-options: DENY\r\nx-matched-path: /fonts/rajdhani/Rajdhanisemibold.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pv5ft-1769579715670-93163b69ce2c\r\ncontent-length: 9584\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9584,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9584, version 1.13107","md5":"3dc147db1fa279ae9edd624869716a91","sha1":"2012d887d353b7fb80210df4d05f68ee6cfb79f9","sha256":"c41ea5ae54c37fd6906c1e6f96200ca749ed4ba33f38fbd8ebc2b183961906de","sha512":"bb5971b6a32f378fcd245823f6fedbb2a1fc4f351b16d6762a22b672fa6f11ea536f838faa678de288c7c745092f359a4506a8f27ddc697a199ba74a776634c8","ssdeep":"192:u2qDcWqYmgSaI995hKe3QkwkQUhF+sO1f9uc0O9VPW1B:u2qDmgSz995h+qQsF+ZVuc0Oze","tlshash":"d712af3d496d7c389d4ca37898edc279825091adecc1cc2747cb5f2fdab9511390a512","first_seen":"2024-08-20T02:40:49.401694Z","last_seen":"2026-07-09T03:47:10.16965Z","times_seen":5,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":397,"dns":351,"connect":4,"send":0,"wait":24,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/notosans.css","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /notosans.css HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2174\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0tZ2Z1tO%2FpLVZfaYON%2BB69fLWCnXwM6wbB1goNTN2hqmrFMgqTPrEgaPVXR8Dkn%2FMlgOjuHtElWzuQTvhT74eE6aviCSbwa9QenIThtNg%3D%3D\"}]}\r\netag: W/\"6978815a-45f\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d610cdab515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1119,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ae88bd369cb3b77544d7b7364e1e43c1","sha1":"410c7b9c4809d73b783e3399dd9fe1f57022ec0f","sha256":"616b4360cad3e83751845d6f353b95069eab325598ffc54977deffebac9981fd","sha512":"a076689dba302959c26e372c59f8fa9f6162ff6a17b33640d435bfb8d92f02538b88308c53c63d2cc91be4d3e05c21cea6cf76bcd8e4313119b49abe799a4d4b","ssdeep":"","tlshash":"5121f3a5945e8934db954cd273cf6f2c4e3d98492009ceae472008518cb1bbc13b1f2e","first_seen":"2026-01-28T05:19:27.986836Z","last_seen":"2026-01-28T05:55:41.039114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/6203cde92c3a452d.css","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /6203cde92c3a452d.css HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2174\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePYhWF7847uwRwx4RYbO3UeBsPxhI42czoag9qFGS4RrLI8bOmbBRzGxmAFYsNF8HGB%2BA3xCM9ITiQTZYw5JZV8evrMd0O1RpZai%2Bdv%2BKg%3D%3D\"}]}\r\netag: W/\"6978815a-1de1\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d610ce3b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7649,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7649), with no line terminators","md5":"268f8716aae5f67e5f41d598877a97d6","sha1":"dc41c9f5b6c12cfa08a7316f1eef6b544dcf6b46","sha256":"62787743b3c4fde57d935efbf85d8d8b97e3209c4158c369f1d4ce6d1ed666a5","sha512":"2ec0609c779365bba2255ba8f08a2e7bb70b22f49bcd091534847373ffe059672f99d94b4191da76ac6ca84597859a92c1318fa6e66e5ea8dc1739cb82bb35f1","ssdeep":"96:ef+e3AZKfMfuZX8e7r3x9IfcYGXKZwLSASw+uul+bTd3:efRSuZXN7t9IfaaZoSNw+uukbTd3","tlshash":"c8f173715a055028f43fc5ab63a5b2980b2dc553d6234e89f113b678c5d7ada03e3bca","first_seen":"2026-01-28T05:19:28.024932Z","last_seen":"2026-02-05T21:30:27.374198Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/new-nexira-logo.png?w=1920\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/new-nexira-logo.png?w=1920\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1839\r\nlast-modified: Tue, 27 Jan 2026 02:16:51 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 03:58:05 GMT\r\netag: \"4e0b26ccfd50485053b3007d962dc5cd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: PeqpPWWFSORgPCZZgRQGcs9doMovIsXUNFKDgZx1pRN7lkDwDR4MOQ==\r\nage: 12913\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 252 x 70, 8-bit colormap, non-interlaced","md5":"4e0b26ccfd50485053b3007d962dc5cd","sha1":"d88e9669feb1511251d7be3d1ebb9e778619ad60","sha256":"639db636cede84a11ff4c86ebdbe8abd04765829a5b72f0d547d3f80e3e51e10","sha512":"6819757626088435d5e490eefeb16660036c1e752cd3bdf329218643b0ba7c89b784aca2bd469cdcc582254344fdf50c8c7d6ef24feba25876bc431d69cb7b3f","ssdeep":"","tlshash":"ab31d7f76207866a932d4783b7e9b62bada1dcdd0e1840b2a1043ded90b25266941750","first_seen":"2026-01-28T05:19:27.977281Z","last_seen":"2026-07-19T03:58:03.061779Z","times_seen":8,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":45,"dns":25,"connect":0,"send":0,"wait":3,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/social/coinmarketcap.svg?w=16\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/social/coinmarketcap.svg?w=16\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 Jan 2026 02:16:59 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 04:05:42 GMT\r\netag: W/\"b77921088d5229288aaf07970b70b296\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: -CdIVtm03lQt6T2TArLMSKlJnqulwceFVOxVtrxWMrqbIsAc2qP5uQ==\r\nage: 12955\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1484,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b77921088d5229288aaf07970b70b296","sha1":"4271a14b681e44c803b7040cb862aa3e1956b734","sha256":"fcab9199ce4b79aab316211581bd2d5ac8927ca02edab8b3f04e49694ad4c47a","sha512":"7607c0d2caaa657e727381574369c7c54cbd9ed10a996d1297eb8f96ea4f57e9a9430a9ab410ec2ef41afa0bbb005b90c2d087097ce18d7a49e6b2a673ef1f9f","ssdeep":"","tlshash":"d53135fa43f474e0a40ee3a4c82559713deb30fb2e68ced543c469e4b6102559c9dc94","first_seen":"2026-01-28T05:19:28.008863Z","last_seen":"2026-01-28T05:55:41.040948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T05:55:13.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l50NNsqeFKMzQXMuFDzgOTwA4%2BLXB31rSHw5RETTUBGQQiFA91ubbnWaJlgdO5A4yRsOJPe24GQgdyaCq8HRYNn4AhcHAPsrKNdv9dfT19Br\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d58dadd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67453,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43801)","md5":"af705aceff77c03b72cdba397e8fc25f","sha1":"7454d112ea79eeea5d14e233d0ffd084cfd8974a","sha256":"c1125a29ca6fdaf1f00a76e2736c187fc6b6e6fbda3410966818b9b6a794fb7b","sha512":"dbc958e58e0ad7a962f4f8f6c782712effb99991c430dfdb5f7b1525ba644bdadbd45c35c0a55764ee1f1c692d5d16c823841cecf5fce662c92ed7cca18c2629","ssdeep":"768:Czd/ptSBdJ+COoy/L19YjHH9ZBpHZKp19Lfv3dPpmiq8wYIpvm/eSh/9eSh/SNSX:CzsOJ/JS40D686Ewj8L20s58h+NE5izJ","tlshash":"8663e8764b11654ac173d2e07aef6b59321b411baf9108f9f9ac65a1cbcfa231331378","first_seen":"2026-01-28T05:19:28.017911Z","last_seen":"2026-01-28T05:55:41.041645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":75,"dns":64,"connect":1,"send":0,"wait":1130,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/bea2ca0cc7b7ad3d.css","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /bea2ca0cc7b7ad3d.css HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2174\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfWyBiGdfFzA7PNVuE1w%2BLuWs%2BgCEtGdOhXJ%2BoZy%2FFxRCSmpje0Kl%2BrlMyuF6YDJtucVVp8zWfaG2vPuSWVMe5XMv92Df3FfJJ3%2BjyfDgA%3D%3D\"}]}\r\netag: W/\"6978815a-1aa55\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d610ce0b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109141,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52206)","md5":"a6ef9405a778889ffd085bfbb639b339","sha1":"aa1061f9d9589a875eccb867d8f415bf1a30a30a","sha256":"719d9a49f5d5bef5c92e2c097b2c12bc70b9e149ce28f253f37c08789b2b2ff1","sha512":"9d7beaa6791ac0ddc516253c9517ee634a9115f22adc3d4e9e0e66665e5599e3398c122d24506548b14940af2a1392fee06f1ea5656dbd3ed8b5513ff599b4f7","ssdeep":"768:MBRHUfIc1Z8J62kOiy/OZxdnnTATPxOgmmjqYiBDo7mpKD+uQWKujEKEF9jBT95p:MzHUfIc38J62x2Z7HyP+4LTL/u8+","tlshash":"6eb396b4b110607f6823e611f29d5ddc5b2af1c28b375f5eea0e709842d76c526a338b","first_seen":"2026-01-28T05:19:28.022697Z","last_seen":"2026-01-28T05:55:41.042237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/social/dis.svg?w=16\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/social/dis.svg?w=16\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 Jan 2026 02:16:59 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 04:05:41 GMT\r\netag: W/\"ec7b3734f0b53eee4efe5643ece29df4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: abHWH61e0S95cEEF6R6bysGDg0s2i83-1dGdMj4vWw-V1x66rijZFg==\r\nage: 12954\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2034,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec7b3734f0b53eee4efe5643ece29df4","sha1":"a535e351746296cc7d7b0f89d97c363c5f4e020e","sha256":"432e4fd44b46523c9173e8453eff1459c2e292bb7a726751b5f2c6ad0103c529","sha512":"15f8010459500a3d698411aa5f79c9a5e47753e76d0352987106c76cb480ee3f281f25afc5ff3d81d24060b03bd60ce6d7f145d71b739af35df930053e24b7ac","ssdeep":"","tlshash":"de4122efba5992d0d40bebf8ed364406a6de70fe7f52c286424199d0da403e58c1ac08","first_seen":"2026-01-28T05:19:27.979264Z","last_seen":"2026-07-19T03:58:03.054243Z","times_seen":8,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":34,"dns":22,"connect":5,"send":0,"wait":2,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/social/med.svg?w=16\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/social/med.svg?w=16\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 702\r\nlast-modified: Tue, 27 Jan 2026 02:17:00 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 05:18:59 GMT\r\netag: \"9da90f1d338dc9cd666463b256724005\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: LkASxmCEgk_ifa6HtRclN5IQ_XbdmIiT_RcHPmPmlfZ-SnlXBoBtTQ==\r\nage: 2532\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":702,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9da90f1d338dc9cd666463b256724005","sha1":"e9b5b90dc0216333c227133e305967ca4f362072","sha256":"680db09a3c99ea81503cc85f4a431a7899c97b0a54ac1af718bfaf0ec6bd23dd","sha512":"e1b49f105a592e2b1cd2f15e6c44c1f27751011b1759193dd0254882883bdc1881a0fde96c60c03620fbbc709fea22a448c5614a7dbe3cd19e45760f2b1cd25f","ssdeep":"","tlshash":"9b01feda6b44f2f0944f97707419325969dbb879abccd2ccdc50fe82f8510d40d5ad80","first_seen":"2026-01-28T05:19:27.997219Z","last_seen":"2026-01-28T05:55:41.044247Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/social/coingecko.svg?w=16\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/social/coingecko.svg?w=16\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 Jan 2026 02:16:59 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 04:05:42 GMT\r\netag: W/\"2e5c9dc1853909ce995878cdb5783f1c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: A6cmBbK5VrhM_uvEZRBv3uHdGbWKmfK8eHoJM_n6RQppBjFDc79ugQ==\r\nage: 12955\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2873,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e5c9dc1853909ce995878cdb5783f1c","sha1":"4d95bea9ff2622ecf3c6cb9664bdd5a2eca1514e","sha256":"7fa58f42ebd2eacce8344884a37b5cb68ed28e5239d915cb965bca960f3e2da5","sha512":"d3bd6c623f6f7bf89e40065f9dc8c3c06516dd17cc1f1d34e410cb52be965e7fd55060a7352e8e6b9cbd9ca8205f1596333b99f8356995195b8aca5a2940b2b5","ssdeep":"","tlshash":"e25175f7a3ccd1e05a07e775e43b59a6f23f28b96fcc82c080509ad4a5c55ee8d48ca1","first_seen":"2026-01-28T05:19:28.01072Z","last_seen":"2026-01-28T05:55:41.044876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/social/uniswap.svg?w=16\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/social/uniswap.svg?w=16\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 Jan 2026 02:17:00 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 04:05:42 GMT\r\netag: W/\"a0657c7f8197e84d0a80c1af5844b850\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 9CJNCQ1-kf-wW4AfEvFQpFv15Wo2wAKoO7QyG4IeuVcPj1vNuehTxw==\r\nage: 12955\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6675,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0657c7f8197e84d0a80c1af5844b850","sha1":"013fc47f595b30d632e27192b7f0a36c61129034","sha256":"1c8b421acd6fbb2a3bc001cf63abc482b6e1abeabcad8af32d69e83c13676924","sha512":"7cc2aad265caa5e44173776bd06e00ea5a658139355ff5983255bdb998b4efa6207eab528187b164aab0ffd1989b8dd5fe074d3b39c9975dc06e8ce39f14137b","ssdeep":"192:y274wGp8Km7OEo3UGUTr8X2SseuCko21DE20:lkwGvcOEo3d4ReJr21DE20","tlshash":"0ad1b3f3014ce2e4920afb79cd274435f1797cb9afc68bda8150ebd5a5261698c89cd0","first_seen":"2026-01-28T05:19:27.99921Z","last_seen":"2026-01-28T05:55:41.045505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/index_1.html","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:15.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:16 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0tgrMN%2F0uwU65w1IiqM3biGOX66KKJNDXCx4AJI05XiJNTcgVAhuR1nkpEuRqwTwhKcUSELNpfyUF0Ujnboazb4GdLDMlxuE4n14F3S9A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d644eceb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"97c283f6e3dc33c6f061ec14c23b6a79","sha1":"eaab78ae38823d6fc5e485af89cd44cf4bba107a","sha256":"227b26ec05ff7c889360111a2f666bd3f1f4390908fdaf51775b96370a501b2c","sha512":"de14e43220475e080f00a5d66a4c34463431416dc11b7ec57a207d6b0afc02df814352f726126a849a1114285205185085166504821a8f8247dfc8a77ca92591","ssdeep":"","tlshash":"42d09732d50a440e9c018ad2caeae2c8c443dc2cfb206e24bcf63b60a65c223883162c","first_seen":"2025-09-08T09:32:07.297786Z","last_seen":"2026-06-06T18:27:16.419472Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/rajdhani.css","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /rajdhani.css HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2173\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YO890zkfPgQlUITayKrE2rgzUbsSy2IOVDoZDlxm60sFK5Yg7eJhS%2FT6nmJUvVW9i7o8qfPougb5NG2ZZWuGDQpgtmdbFCjdPb5VD3fTnQ%3D%3D\"}]}\r\netag: W/\"6978815a-81d\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d60fcd5b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"06dabb178d13abf3e50f6739ad2af0c1","sha1":"16a88f08588bc42f5918b8b4943deadb360f174c","sha256":"a394d7a66e3123ef097d82264e494f1eed4cb572479dc0499135c553084e3f1e","sha512":"ebe825b0bb1c86a077364280c7bbed320a50f64d85be31028067a33ae5025eb2a07d6fb94becc762fe0115afefd10c01d6914c071e4898f8327e82bd157bfb24","ssdeep":"","tlshash":"70418f73094b7594532268a932ef7f698c0b2a776d348c2f761ccc5c1e6af681211f8d","first_seen":"2026-01-28T05:19:27.984591Z","last_seen":"2026-01-28T05:55:41.04658Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/31b19921cee270f4.css","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /31b19921cee270f4.css HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2173\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POCWMS2kGRTV63Jj10uQWbNrHqc9f0diBq03M%2F5Gt5851vgkmpNBHUpzNd6DRvApZHvwDbbG4br2%2F%2FC6rrr2hCTw4x3DEaQuwHnk0N8QVQ%3D%3D\"}]}\r\netag: W/\"6978815a-2173\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d610ce5b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8563,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8563), with no line terminators","md5":"f1ea70c19e79effeba84eda08fdc1649","sha1":"f5c4248f5958920e5974e2f909a70dd95e74585c","sha256":"eaa521b4324e97f932ab65ae79c2733145f98e48447f9695ab5c03ef15ebbcbc","sha512":"55aa2f904cb13294b616724523a2432eb712245bd2a7e9ed4b4e85fde42dc748fafdd4f9e9f4d03ea232a10ae6d635b8f88e800b1bc9da8cff0cbb437ce19785","ssdeep":"96:F4DTrruplKkK4KErKxK0JqQ5D9m+5lcZ1bLf7E+0PcwNcw4StJ:WDTvuPFZ9oB9D5aZ1b9/iX","tlshash":"8c0273ea91155784b2ff932f31d4b1680168cab3d5561ec9a6a97f24828bcf603b3f44","first_seen":"2026-01-28T05:19:27.991006Z","last_seen":"2026-01-28T05:55:41.04725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nexira.ai/fonts/rajdhani/Rajdhanibold.woff2","fqdn":"www.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:15.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nexira.ai","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 02:38:44 GMT","end":"Sun, 29 Mar 2026 02:38:43 GMT"},"fingerprint":{"sha1":"40:7B:79:F9:B5:4D:F1:75:1F:84:66:01:A3:9A:4B:3A:80:A4:C6:5D","sha256":"89:6E:21:C8:27:34:4D:26:7B:04:44:66:05:E0:76:F2:D3:89:B4:3E:3B:79:17:63:56:0C:9A:56:12:00:17:66"}}},"request":{"raw":"GET /fonts/rajdhani/Rajdhanibold.woff2 HTTP/1.1\r\nHost: www.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://reward-nexira.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 98866\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Rajdhanibold.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 28 Jan 2026 05:55:15 GMT\r\netag: \"528f51e741b9c6f9e5801621f20ea64a\"\r\nlast-modified: Tue, 27 Jan 2026 02:27:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-frame-options: DENY\r\nx-matched-path: /fonts/rajdhani/Rajdhanibold.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rgqdg-1769579715670-0e06c0fece5a\r\ncontent-length: 9544\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9544,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9544, version 1.13107","md5":"528f51e741b9c6f9e5801621f20ea64a","sha1":"425f2b1056a930554b32ce6e014f9c5fb1a4d147","sha256":"7360420a849d6c5e37b6432b67a3e51cc5255048fbeffd8e15b376dabff4e58c","sha512":"0e0677a72f2dfb82c1e80e70f7bc34569fc39b94be83bfa63f66c22c5c996b44f20815917eeccd79d1c13294b9fc6b38130ab01c6c5d30f5a77e9475cfc63d32","ssdeep":"192:a37+F0advRDTVeWNKy1NsVRe5mGHnIVBdkwLhKOgQa5:G7+bdpPVeW4veYHd1Lh705","tlshash":"0d12d08698f98624a703c97c90f39676bd3ff56726f374229f11510e0c10fc9664d01b","first_seen":"2024-08-20T02:40:49.400857Z","last_seen":"2026-07-09T03:47:10.140174Z","times_seen":4,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":401,"dns":354,"connect":4,"send":0,"wait":16,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.nexira.ai/fonts/rajdhani/Rajdhani.woff2","fqdn":"www.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:15.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nexira.ai","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 02:38:44 GMT","end":"Sun, 29 Mar 2026 02:38:43 GMT"},"fingerprint":{"sha1":"40:7B:79:F9:B5:4D:F1:75:1F:84:66:01:A3:9A:4B:3A:80:A4:C6:5D","sha256":"89:6E:21:C8:27:34:4D:26:7B:04:44:66:05:E0:76:F2:D3:89:B4:3E:3B:79:17:63:56:0C:9A:56:12:00:17:66"}}},"request":{"raw":"GET /fonts/rajdhani/Rajdhani.woff2 HTTP/1.1\r\nHost: www.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://reward-nexira.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 98866\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Rajdhani.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 28 Jan 2026 05:55:15 GMT\r\netag: \"4044e16068a142386db1370b09866417\"\r\nlast-modified: Tue, 27 Jan 2026 02:27:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-frame-options: DENY\r\nx-matched-path: /fonts/rajdhani/Rajdhani.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9gvpw-1769579715669-66a6530d3611\r\ncontent-length: 9236\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9236, version 1.13107","md5":"4044e16068a142386db1370b09866417","sha1":"29c7bc02c68fe07f462f479c13bbdfbf1dcc0a73","sha256":"40f1f31b61eea9168f9f63e6de164c90ee5d791bc0b71413942d71282b5d3273","sha512":"fb47ec8fe239bfd975738aa6ee3e7e7159850c70bf1fb959363d248e2ce0cfd2ccb08e750161ba2e8ca314079577f840df8f0c251397e9bda7788de7f3e83938","ssdeep":"192:DjGf7lq3rMforbYIhMO1D9keuzUWcYlzLfonpEsGUORMIdVF9jaa:+xq3zrBL1D9j8pzGpEFUORMIdD9+a","tlshash":"8b12a09dd6307348586972b9d74f28343d828a907c68332689abc86e599cbaf0286566","first_seen":"2024-08-20T02:40:49.402475Z","last_seen":"2026-07-09T03:47:10.162275Z","times_seen":4,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":389,"dns":344,"connect":4,"send":0,"wait":24,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/favicon.ico","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:15.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:15 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2173\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBmCkydmwJ%2FtXOXN%2F0TdeNcwLixjn7KHz2jsqgjo3hA9kmLhZjp6iTzv1%2F2UM%2BvoCTmpWNdsuaiJJWy0e0i3ny%2BYD8IBtGzDCvqn%2BL1Duw%3D%3D\"}]}\r\netag: W/\"6978815a-3c2e\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d681969b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"169dd8d08e32bdcd26a7de286f8330be","sha1":"a1d17c9bae9d3c2e6c1c9c4d9728325d36eedd7e","sha256":"a19724e61f15e9088eefa11bd393019e36903073e33d4d5ebe431ed60bcefe83","sha512":"d40d683c8c296ee7d88db86825c7000bc5fc193337b186efb918febee2c5a3facab94cc9bdc9f39bb9f9dc63677ce966af070077f95e8d6545172e94b66efc49","ssdeep":"192:dNI22M22qieaxnaZmX229222250G2222y22222222Se222222222222d2222222i:Jlpcy4nHubI","tlshash":"91622faf73d94b22d0d5e6b26b78d24d3a16fec2143c6542c41f313febb50aa1e6011a","first_seen":"2026-01-28T05:19:27.9751Z","last_seen":"2026-07-19T03:58:03.059188Z","times_seen":11,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/index_2.html","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://reward-nexira.app/index_1.html","date":"2026-01-28T05:55:17.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:17 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYQKN3qcX7p0rK4IZiYPkQ%2B7v%2BGUu%2FSLgy0cpuZGaIPbyR0HNAKrzfypvWgSDSRbqB4fgEX0dmmcYuPf6F%2BVySCjRqjonX%2BZx9ALynuaaA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d74da5cb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"486feeee46fcc9b408bf254bc92bcf44","sha1":"b17bfdee34f49e39e13cfce10b93b666d5c89c3e","sha256":"838f4ff49801e10f7c0e9dda698d68d543f72393e282b60f18451e3c12e41621","sha512":"1a62fadb603ed656b71193e21ae0b1356d1846c260459dad742cbffd2e9126fce4a717314801eecc618e4bd69462008688a60f4c69b11bc34467458fc033d597","ssdeep":"","tlshash":"14e0f1939312c80a0956a3c13fd5f704400bff1ff4019c54bdf590e898ea337e826a84","first_seen":"2026-01-28T05:19:28.015625Z","last_seen":"2026-01-28T05:55:41.04935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/common/no-connected.png?w=1920\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/common/no-connected.png?w=1920\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 50748\r\nlast-modified: Tue, 27 Jan 2026 02:16:25 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 05:18:55 GMT\r\netag: \"579c98a5fc174a343eb1c15f8566a8ce\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: INrC55k7aFirboLEPO1FJwERBpzfB8L_wr3tGl4F0Pjosz3IhKKfYQ==\r\nage: 2528\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":50748,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 419 x 418, 8-bit/color RGBA, non-interlaced","md5":"579c98a5fc174a343eb1c15f8566a8ce","sha1":"51c9942e51fb4541646a735a7017801551cc0e54","sha256":"d3fa03b2b1131db3a8c73d114688a458a2e9831c31ce7a890dfc58f6be70f62d","sha512":"2b40402e0bca9132680f4a922e68f6268a8dcc72829bae8faaa0e5012007199d961282e322ea49f68c4e496a8cdf58541ba8125829ed7840ee08bd2297dbcb13","ssdeep":"768:kbg2WN5oKRRE2QuR0FlBU1KaAduS8W8XVqfZWnkL8UmT3cf9zNgrKCb9+YoKXuY:0yBQuFkaAdF8W8XSQUw3cf9zarKojX9","tlshash":"273302bcdf046665034f1085576d68e8c04f2be6c8a43a123ebe4c7ceb0b7911a95b3d","first_seen":"2026-01-28T05:19:28.027534Z","last_seen":"2026-07-19T03:58:03.057225Z","times_seen":6,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":39,"dns":27,"connect":1,"send":0,"wait":4,"receive":2,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/social/tel.svg?w=16\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/social/tel.svg?w=16\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 538\r\nlast-modified: Tue, 27 Jan 2026 02:17:00 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 05:18:59 GMT\r\netag: \"f8beedd8b1c38fe83ee73de814403615\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: AS-2qiMv27Z5r0w419FNEV-4q4BUcLWk4bSNHHuibJCB3Zr4n6zIWg==\r\nage: 2454\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":538,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8beedd8b1c38fe83ee73de814403615","sha1":"47c0997b96a63b28e501add55541c3a6dcf96ad6","sha256":"6d6e7ea8e3a6195bdc18d0081e96e5aa4f1ed7bd28898234183033428b574354","sha512":"73fd65a93435aaf0c616cbb04a9add4eb0fde88d1834d38528e3eb8ae83e4f8f09c5557c0673a312a3a78a25c1456b2c49e70c03ffced604ab2590adc00af201","ssdeep":"","tlshash":"a0f0c072a04ae6b0c009d7549d2b74755756f0f9ab94d0c4c6717342f7540f2dd1ac6d","first_seen":"2026-01-28T05:19:27.970481Z","last_seen":"2026-07-19T03:58:03.06056Z","times_seen":8,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":32,"dns":20,"connect":5,"send":0,"wait":6,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/social/yout.svg?w=16\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/social/yout.svg?w=16\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 716\r\nlast-modified: Tue, 27 Jan 2026 02:17:01 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 05:18:59 GMT\r\netag: \"be11cf9c0727c14e931c3bf9a184b5b7\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6xfpDz51QsmhxOQY3Vic7_3q5FoDSiwYIeL01RB0JlNchEZJNH6Y3Q==\r\nage: 2455\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":716,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be11cf9c0727c14e931c3bf9a184b5b7","sha1":"6504a76b8d6389c2050497d546694f385933da26","sha256":"8d73a741e66ea433453dfa5f9983a7a3a19923b54292847d737133c617244c38","sha512":"7abec6d1635e95aa0a827415e84ef804b260eb34723c0b278a3c6ebe4fc569cb7b8ddb34f5e597f19d124a53c18f18e4077e0d8c08ac57d15f450dda927ef961","ssdeep":"","tlshash":"2b01fef2a88857d8fa92cf80a0099de630ffb8f5ede2470082cac461e06b051cf66c45","first_seen":"2026-01-28T05:19:27.993231Z","last_seen":"2026-01-28T05:55:41.051234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/secureproxy?e=jscdn/getFile","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:15.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://reward-nexira.app/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://reward-nexira.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"eo2upuit3j1bi7kc0oxl\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfSBZ6TkIxVMF16tuzogLzbuVODlI%2BnimOQ%2BQScDnz8M2uF1yv%2BJ%2F6UGHbrt7SjG4pFhc4xXGTuQUylMzztvz95%2F4TR9cB9KOBbOMk%2F0I9SkPg%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d64ef29b515-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4301405,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2bf248f12789e8f85f35d83e6f076994","sha1":"78fff88dad03ee313ef9ea172b92a87df3ed38d4","sha256":"cbdcdd4d10df508b7d2a442c2339ba7892ba8f073e4f0066cbbc5f22be00eadf","sha512":"b59578f46d440b536dc609e50ae7dc68d90dc26676447b3406ee7f57ea7197c253a6e066d5684ed9bd718ebd717a4896c35e373470728fbdee6097267686438c","ssdeep":"24576:RJ3OYnGGmWyDKKJonvbEE9JnXwaoZ9YKFcS13HqzWM9:7GGcHqvvrgakiKiSCL","tlshash":"192523c7f0cbe04135944132e2f1bdaf2a99507aa9e50ab76318dc44a44b5b6c7fcad3","first_seen":"2026-01-28T05:50:40.974856Z","last_seen":"2026-01-28T05:56:31.166516Z","times_seen":3,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":372,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/c7d5c961180aeab1.css","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /c7d5c961180aeab1.css HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2173\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2BzeCQahhZrCBGErQXB2lp2Sw5JFEFJXHKvO00xKU%2FYvyVhu53GPsSIiL3mBYxCGCWB6oAkuOoKYm6UTqjYv7bs3oJ3iHpfCLxuyCaYh6g%3D%3D\"}]}\r\netag: W/\"6978815a-7456\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d610ce2b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29782,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29782), with no line terminators","md5":"c4637970f5f2c7012cdb0d8379a8d2bd","sha1":"f35b8d4e52db5203df95f7ee11155343cd1791ad","sha256":"2154e340f9a1f5f9e7141c32e6fdfad9fb89104a4151e40f71a407405637ba47","sha512":"c41d9c9aed9058458ce921813b73e35c606e8917c51cc8eb4f7c7cf3cf64c6eeba41773730a7583b3f637cb09285d71aee9af7a8123397ff23959c71172c66e3","ssdeep":"768:r43yabaXXfX0hhVIMW9fajsO5y5yhv7vR7:VXfX0GMW9fajsO5y5yhvjt","tlshash":"f2d2a6336a44746ce0bfc69b6052a3d8011dc851d61749f6e623bf3d89cb9a707a3f89","first_seen":"2026-01-28T05:19:28.004808Z","last_seen":"2026-01-28T05:55:41.05236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.nexira.ai/landing/public/images/reward-central/hero.webp?w=1920\u0026q=75","fqdn":"cdn.nexira.ai","domain":"nexira.ai","tld":"ai"},"ip":{"addr":"52.84.50.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexira.ai","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Tue, 18 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D3:64:6E:7B:04:5E:2E:54:84:96:AB:83:EE:B3:4D:DD:F6:D5:59:68","sha256":"F2:70:47:FF:B8:13:D9:E3:45:EC:7A:8C:DB:2F:66:27:FB:54:96:6C:3E:87:C1:C5:E5:7F:76:CE:47:13:DB:70"}}},"request":{"raw":"GET /landing/public/images/reward-central/hero.webp?w=1920\u0026q=75 HTTP/1.1\r\nHost: cdn.nexira.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: binary/octet-stream\r\ncontent-length: 116792\r\nlast-modified: Tue, 27 Jan 2026 02:16:56 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\netag: \"ce7933c921a19e4e7d8245e267072c37\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: xDGMVOgTs7gcI5MEnyjYod5UyadlLPJKw35-Lps23h0fSfRKRJD1MQ==\r\nage: 12955\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":116792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce7933c921a19e4e7d8245e267072c37","sha1":"553c2728ce2615f3c336fe9dd0ac47323c6dbbf4","sha256":"da58e9fd5a0efe61697ad204856be8971854c46254d43f9cee01363d4886af24","sha512":"6d3715f1b7f3262ef54d9356e664a82a70295b0db59785c6e0d60ff6cda9276cf55ce06c833fdd0b638b6308dbce07b0e0aaedc2c0a3f9666960e9cb66f038b0","ssdeep":"1536:Yfxq7+f8nb2EX/yFr+DiWEsLOQUieXDqslDDbCmt3XUT/Wdfa6LPrCZiCc9vb:z7BniEX/syOqgDqslT3rd7rrCZiCc9vb","tlshash":"bdb312863aab04bd457dc067a8df94804a9db6e71700bfa14cfc0ceaeebf4a21c1540c","first_seen":"2026-01-28T05:19:28.00688Z","last_seen":"2026-07-19T03:58:03.063188Z","times_seen":6,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":36,"dns":26,"connect":1,"send":0,"wait":25,"receive":4,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/orion.js","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:14.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /orion.js HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:14 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2174\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PEIpX1G7bpmUyWQ4b1CeJ2lu3T3YkkqvS2fS2sw9lFB9qtkrJezgfO%2FexfZRJfOft7gFuWiLU5Me5t%2F1h6mKLrVmo%2FDV28yRGkqmbzalsQ%3D%3D\"}]}\r\netag: W/\"6978815a-1a5d5\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d60fcd2b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-28","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"reward-nexira.app/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"reward-nexira.app/ffaa099e5013e9fbe11731aa91e54470cb087996.svg","fqdn":"reward-nexira.app","domain":"reward-nexira.app","tld":""},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reward-nexira.app/","date":"2026-01-28T05:55:15.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reward-nexira.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 08:16:42 GMT","end":"Mon, 27 Apr 2026 09:15:00 GMT"},"fingerprint":{"sha1":"F2:0A:55:3C:9B:5C:8C:08:15:76:39:78:1A:1C:4F:96:0C:C0:2C:BD","sha256":"E0:AB:BE:46:3A:1E:02:C8:BE:92:A7:B9:09:54:65:9E:69:F2:A5:F9:E7:1D:1D:40:BF:79:F1:67:44:57:0E:AD"}}},"request":{"raw":"GET /ffaa099e5013e9fbe11731aa91e54470cb087996.svg HTTP/1.1\r\nHost: reward-nexira.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://reward-nexira.app/c7d5c961180aeab1.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 05:55:15 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 27 Jan 2026 09:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 2173\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TCvSrltKPgICDGgWVwv9F%2FOemdUwQoiKC%2Fy5yOFdXESCHYV3ZOs9jmfn0Qf%2FL9a1i%2BfQ%2F36B549u3nRBTS8z7aQEW9c%2BPTDODvxSfUEmCQ%3D%3D\"}]}\r\netag: W/\"6978815a-3c4\"\r\ncontent-encoding: br\r\ncf-ray: 9c4e3d646edeb515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":964,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b614a6d763084bd4de198c89405d5cc2","sha1":"ffaa099e5013e9fbe11731aa91e54470cb087996","sha256":"03639d7ac80150e9b704973b6f24eede355a4796ae170870f82fe369db90b45b","sha512":"3c9f7ea76812de2019fa829e62274fe8db0f941c1c424cf28fa52716c87e322231833066f2cb75544d73af7358f2c72aa24bd75bad98b2d466664e555acdcb9c","ssdeep":"","tlshash":"9c11bded3a0d50c92108e2feff3f5cba28667ce02ed01789e29c353962e12d85c96944","first_seen":"2026-01-28T05:19:27.981726Z","last_seen":"2026-06-19T03:30:37.553623Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
