{"report_id":"7af1522e-9a5d-4077-ab8d-66cb8995a8ab","version":6,"status":"done","tags":[],"date":"2026-03-18T16:51:08Z","url":{"schema":"https","addr":"nestfincs.com/","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":0,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nestfincs.com/site/","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"title":"NeST Financial - Regulated Global Forex \u0026 CFD Broker","dom":{"size":719,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (719), with no line terminators","md5":"d22fbd66120f71961ed76fcd72470562","sha1":"6fb6994413f2bfc67580f896a513778ea83ac9ba","sha256":"f876b95898a1745bb332dc113640d6e12211c502c9d3f97a65a3bc5c28d434ed","sha512":"0f725ca3fcbb2499711c68f8595dbca2997a46b15090639bd0cc0e34bf4d0322e206821ca6e3dd6276b9b230fa1e47573b885d851eae6d64a526af48c3b49b7a","ssdeep":"","tlshash":"16019cb33504c8d3375049c7b8d03158918a630fad484c614d9b467bda60bf00c3d65a","dom_hash":"domhash1dd8e3179d8191d8c3db88b3cd44f597","first_seen":"2026-03-17T09:22:10.946461Z","last_seen":"2026-06-05T07:41:24.243687Z","times_seen":24,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nestfincs.com/","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":0,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T16:51:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nestfincs.com","ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2026-03-18T16:51:10.636993Z","last_seen":"2026-03-18T16:51:10.636993Z","alert_count":78,"request_count":39,"received_data":1435914,"sent_data":18408,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Popper:1.16.1","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Bootstrap:4.6.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"code.tidio.co","ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-03-11T20:58:59.890246Z","alert_count":0,"request_count":11,"received_data":1625882,"sent_data":5186,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":5,"received_data":158815,"sent_data":2665,"comment":"","tags":null,"fingerprints":null},{"fqdn":"socket.tidio.co","ip":{"addr":"52.16.57.59","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2014-06-01","domain_rank":107322,"first_seen":"2017-11-23T13:17:52Z","last_seen":"2026-03-11T23:42:27.609851Z","alert_count":0,"request_count":1,"received_data":161,"sent_data":739,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_414_0/static/js/chunk-WidgetIframe-3353b867d867ea9ecfde.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b41c7665d2edf7b642efedb4912128ec","sha1":"09959a47ec5e115983c36517ea05834d672aa34a","sha256":"8b0478540a4df1ea946d175eb78479e531f3efbe43160aab644cea94c7c8062f","sha512":"e0c8b3cb88422f4f2510fec49fa845357a807ce6bf9e73aaaed825f30be0da78630183ac864ad92f9153a371e22ec3f727435d2b3c096fd29ac33c8a19c07f35","ssdeep":"12288:U9k2lcFfj1qLy9ZbRiQoBvomrCF4r9IF2mHKP01:8lcFfj1qLbBVrCF4r9IF2mHKP01","tlshash":"f6947dc67043746cbba352aad4a7540c777e340dba4c84a8f6bcbca415894d5a373fac","size":423814,"data":"","first_seen":"2026-03-17T09:22:10.999306Z","last_seen":"2026-07-01T04:27:22.18688Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/zqxipe9wgscamxmh2bdklsazumafjfph.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ab360094ecb0ef2a90266ee1ac1b568","sha1":"2fc5c5975f95f83fd66fbfdc0c109f47db9146f4","sha256":"b0fe4419fe11bfe4820e03852138897aaa39f0ec2fe7bc609fdc38b01e8a3e4f","sha512":"d44c5d78470d825f681fc973eab97c321d81954d55c7e15e68bd3900879a9430b17a2469ed15ff4bd3ffc83d1f9ba679f6f4e02fe0dbf916d551f31bdcfba1a6","ssdeep":"96:o2yozLgSyMGBAMa4qc8uLetLu97QinoAXKNkvydcQ7fFB/4Lw9O9GBdYPuc:uoz9y841LeEF/n60y1IFkzYPb","tlshash":"38d1c991316824a90266967d207fb30731a9712f650e9164736cdcedbd38dc3814fee7","size":6426,"data":"","first_seen":"2026-03-17T09:22:10.956197Z","last_seen":"2026-07-01T04:27:22.195087Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.1/umd/popper.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1022eaf388cc780bcfeb6456157adb7d","sha1":"313789ca0e31b654784dbba8b0f83f364f8683b4","sha256":"fe28dc38bc057f6eb11180235bbe458b3295a39b674d889075d3d9a0b5071d9f","sha512":"b9bb93f19f3c5b17b3812a9fdd12ee362e659a3b2d8897327b3c77e32214da0007a27222dbb35aedab6acd46423a8638084c5aa05ba6cceb054360a1f88fc70b","ssdeep":"384:wnM6G590O7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBS5vISg3gzopL9TidOgHX:55l7X/jD45eSxpOxvKD73S5vTzwL9Tib","tlshash":"2b92a3dc3294b06643a791a7a0bf960eb2339875610e9410f198f2d97c30ef9917fd7a","size":21233,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-09T23:48:40.24743Z","times_seen":19036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-10T02:47:50.256665Z","times_seen":184796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/js/main.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40c3ad61eb1de27bc8b9cbaa9a345816","sha1":"3fa85103832e11e3dd0b14d9e42c898be4ec57d7","sha256":"9b6760c485cb5ed0b58bb060b07cd6d67161e80351fe9092f497a9f2c32b3b2c","sha512":"908035e4c02ba3c5eb7e550ac4af2b062ed68d30478cbbfe240d82a3c15b4cf5b19a0a7b92045302082a585076bf56d6442237d80bb41c01045c0a84ca2cb6fc","ssdeep":"96:XigSCvDdKjE1rIlITt4I8IK5PE1rIlITkt4I8IK:7DaJPZA","tlshash":"c091b00ce757787402be1866d94e2ec5068e0e2ad28b90e2fd22517f05fddf8e66194a","size":4588,"data":"","first_seen":"2026-03-18T16:51:14.136958Z","last_seen":"2026-03-27T06:38:41.292316Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-10T01:49:01.395427Z","times_seen":67022,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/js/bootstrap.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0c2bcf5ef0c4476508d79ec9cdcce07","sha1":"3beed68ed7d753c6bf4f61c26386ddd7929ba030","sha256":"edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba","sha512":"5ca6bd1de99dcb5522dca486809760332625520d6033e4212fa7279724dedaaccc0989b89c06753ec55ead0cd34d7ce89d447e766b301ea8093eec02ab531a02","ssdeep":"768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG","tlshash":"a453750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","size":63467,"data":"","first_seen":"2023-03-07T01:03:47Z","last_seen":"2026-08-09T15:58:06.424127Z","times_seen":10823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a29f1c209c1db157dc173bcf057d511f","sha1":"163ed91d4e95f36f9c0a253506226f078cf4a660","sha256":"a65a4c0d475185995f14632bd2b291c2a95bce4e91109df0b40f6de54c4ea719","sha512":"253e8365ea43b0337153fff973061e96c472b11196453d24da1993a83be8c1e82364b8fba8529d628e6fb253e6dab1ba83e792f7c53be0913cd52f693787f3ae","ssdeep":"","tlshash":"62700000b0030c222032008e03020000200208032220800030ac00880f008882220088","size":25,"data":"","first_seen":"2023-03-07T12:39:59Z","last_seen":"2026-06-07T01:04:12.097735Z","times_seen":1209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","size":14690,"data":"","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-08-09T21:38:00.010331Z","times_seen":10360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_414_0/static/js/widget.3353b867d867ea9ecfde.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff0911de5fbab76d427ed5553bfa7826","sha1":"d1d790c48c8554d056e9f974dfe4c27a781f1f35","sha256":"7c522259872c7dcb772053e5686496475eef7c23a5a5ed0f4adf63a4f9c131b5","sha512":"6f3b72057d50065af7343f50387f48360396efeb700ed33e41648bf5c5f73f1c4a754dd35f25d1f60cc7fd94ffbe299994e45b2ff74f3bc7f32cebc36d355d32","ssdeep":"6144:dYDH0ukFmcq0mEn2tl0rEfLEz9fWjLUP7arRGKErehbzisAk72J9UH+kizW:dY4ukFm0ulXfLEjalcehbzqkCZzW","tlshash":"d9c41ad871d2f06247e312a6407f1107f33e5959380d8490f668edeab87958ea237fad","size":586340,"data":"","first_seen":"2026-03-17T09:22:11.102735Z","last_seen":"2026-07-01T04:27:22.174919Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.css","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.css HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 May 2020 13:05:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-10T01:44:09.56125Z","times_seen":43092,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/zqxipe9wgscamxmh2bdklsazumafjfph.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /zqxipe9wgscamxmh2bdklsazumafjfph.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://code.tidio.co/widget-v4/1_414_0/static/js/render.3353b867d867ea9ecfde.js\r\nserver: cloudflare\r\ncache-control: public, s-maxage=300, max-age=0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ta1UNfBYC7MWt8IpPc1pVlzgjvadD8wi4m95cBxGqi2YIloW98jOl0wmfSNCVH9d%2BZkTUSqgS9V1rkgeG2VtU9wnFhybK37fYBsJdw%3D%3D\"}]}\r\ncf-ray: 9de5bd076db21382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6426,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T02:49:09.65511Z","times_seen":17809966,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":40,"dns":33,"connect":8,"send":0,"wait":198,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/other/autochartist.webp","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/other/autochartist.webp HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/css/responsive.min4d3e.css?v=LlcYhxlAlHvOzumn4FATVxvxHvHVOn1TLJL5WvweolY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36718\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b7f9f6af0be5ae524e49a11dc7d175f","sha1":"ae8813486abb5e33e3c29ea6b2bf8f1c5b8172af","sha256":"6ab50c6bf4539f641a06120b8121839c76c0e826d36fd1ed70c21b9c32ee9d45","sha512":"895e7e5cb70c491de1aabd6525a2b2cb77295b89c24129a32e66746aec762a13829564e1b197b577822abff7272b07330b4b3dbd01a108132eb3da9884c2f941","ssdeep":"384:7Sr88iDrOHNZKal7sf8R179u0LTxCGmISYptYwRismG4Cq2sn2QLiOO51k:7c88fcsQkRJ9uITxCGmIHrzIsB4LtiQ","tlshash":"71f2bf351ef57420c64967b264ec64046ce357438840ac46fefdaa6a0f31badce5f6c0","first_seen":"2026-03-18T16:51:14.099226Z","last_seen":"2026-03-18T18:55:55.980264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/fonts/inter_UcCo3FwrK3iLTcviYwYZ8UA3.woff2","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/fonts/inter_UcCo3FwrK3iLTcviYwYZ8UA3.woff2 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nestfincs.com/\r\nOrigin: https://nestfincs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 73116\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\netag: \"69b8ff3b-11d9c\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 120721\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GRW3dhFuluPaOsAzzg7FqvZ7mW0LwXg3ciO0YjfLSkY0bEt4L1m%2FXWeGspCfwKUYLgIvI%2B9muIyZYjgaLQG7N0eb5%2F3EXVzfUuURLg%3D%3D\"}]}\r\ncf-ray: 9de5bd0c88421382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73116, version 1.0","md5":"60b04eb8b865c18ebc9629881225ea3f","sha1":"e011916aaea9f6cbbba00b22bd45cda39bfee2bf","sha256":"7cfebba3d553c9b143bbc3544fff388f4d1fe122604d51470fd46a4babc74970","sha512":"d8031b12558271f0e264f683df6bd6b8f3dbd8de0ed3d331604e5ec9372a8a013386f9eb870b4e8d1610f6786151fd83cd4cbc5f2cc0f8996f8d855cd69b49a7","ssdeep":"1536:iPJpJutTS+KKG4ZKUOs3S6rRVIPzAyI1cnzyuOwizntkhIqu1/HwwKeTxkHS:aSGKG4T1VIky1zVOwSUIquNHwXSAS","tlshash":"f5630228586103d080f684c8eeb6919b8fa529921ff09a8809d75677d346e57dcceb46","first_seen":"2024-08-27T03:47:43Z","last_seen":"2026-08-09T22:51:24.720743Z","times_seen":7487,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_414_0/static/js/render.3353b867d867ea9ecfde.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_414_0/static/js/render.3353b867d867ea9ecfde.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nestfincs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b8ff3b-191a\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 120722\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VcfBQxAbHjIgpMIyfiyUwAP8FrbvHsFqYbPvToYubTJLvWiMG%2BKLXqK1TiptPylXPYQ981%2FuBSHrxCx5dAy2OA2BHsvxN7v7Ngm9Fw%3D%3D\"}]}\r\ncf-ray: 9de5bd08a8301382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6370)","md5":"7ab360094ecb0ef2a90266ee1ac1b568","sha1":"2fc5c5975f95f83fd66fbfdc0c109f47db9146f4","sha256":"b0fe4419fe11bfe4820e03852138897aaa39f0ec2fe7bc609fdc38b01e8a3e4f","sha512":"d44c5d78470d825f681fc973eab97c321d81954d55c7e15e68bd3900879a9430b17a2469ed15ff4bd3ffc83d1f9ba679f6f4e02fe0dbf916d551f31bdcfba1a6","ssdeep":"96:o2yozLgSyMGBAMa4qc8uLetLu97QinoAXKNkvydcQ7fFB/4Lw9O9GBdYPuc:uoz9y841LeEF/n60y1IFkzYPb","tlshash":"38d1c991316824a90266967d207fb30731a9712f650e9164736cdcedbd38dc3814fee7","first_seen":"2026-03-17T09:22:10.956197Z","last_seen":"2026-07-01T04:27:22.195087Z","times_seen":70,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_pips_light.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_pips_light.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 421\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1223,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d7bff0137cfc011232324a08dfa7117","sha1":"20c6660b87bdc2318fc7c318a7efa0a6ed669fd1","sha256":"40adc0189b193ccc7bc7512fe4047a5f59de6f65df9df8875680e7e8248c7ab8","sha512":"51e90ccdcb34c5e1239975ca2c3cc232cdd1f7970355f4d2324d5e8cc9f9958da2df0aa590c381a4e5c922e25083a4f58846d41889c4c64bc03021e01638cb43","ssdeep":"","tlshash":"51214c7a17e54bec1960c36093c529582579f15eb3d105e9f3d030a6ed31667229a372","first_seen":"2026-03-18T16:51:14.103002Z","last_seen":"2026-03-18T18:55:55.974309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T16:50:47.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/ HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 11 Jun 2025 12:12:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11064\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Popper:1.16.1","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Bootstrap:4.6.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":78569,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (319)","md5":"e249b2110155456bf3c4da2fa56fdbaf","sha1":"51c295acbd29f8adcb3e1a601ebc9d25738ebd07","sha256":"146bf0f84f73c8440b541e71979da9206e42bdac96fc937af50670bc3dc571fa","sha512":"f7fe3612eb6c867bb6df542f3ed307f269a71b3e04942f67afefe33a2a15ce441315c4e988ca627ba7e0f7c3aaadfe3ebec4d67aac5324a094b30c56f2bf1cb4","ssdeep":"384:WhyZvxp+hE+h1YtI0/6vg2zYpMl01qLjn2GFRJeYPt2tgPojQmh+oJTJc:WUZpWv1YtKAOJJREJ6","tlshash":"27730e21a4f5202b02c361c52e615b6f3ec2a617da2a5a1673fc5b9d5fe3dc2cd1360e","first_seen":"2026-03-18T16:51:14.104486Z","last_seen":"2026-03-18T18:55:55.970793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/logo.png","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/logo.png HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 18 Dec 2023 21:37:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35626\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35626,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 86, 8-bit/color RGBA, non-interlaced","md5":"fbe67f5849db4b0373aaef80a2951b07","sha1":"b693c984f49012442a5c38790b7005bf6333b895","sha256":"21803aac33a3410d09af88ab1ea896ea3abbb077f63c47ccd842bd256fa9280f","sha512":"1459960c052443d88d152c45371e8e22e76368a3d28ad3104f4889538c21422f95df4f8fc4ff2ce63b718d89518d0524614db50a65a21da28e9379184cad6fd4","ssdeep":"768:tlgzDZhf2U/boRicNxBdrDJ8/D2tkdwW8y9WvHOJX3nnerHnNJTt9:tgVF3WxL/e/DfXWvHMHerHDTt9","tlshash":"10f2e03255c2ce1fedc7e2b9bdc83fda91e38a9a86f34c1c9673800ec958d6b0550429","first_seen":"2026-03-18T16:51:14.105749Z","last_seen":"2026-03-18T18:55:55.963078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_flexible_light.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_flexible_light.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 701\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1399,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f64e2878400ec2ce58e94da0b0a4792","sha1":"cffd5f8db98eb6954bc781801a00b66f41083619","sha256":"a49ee6433aee5c7ba50c23dc76ef723bc1fe34e6d56b212fd9120890be2ccec2","sha512":"102adc5a39f406c63d0351c41b1a28b292f9ae04c5f2bc01cf5c8ca12bdae275b2b4a63939f4570a09d7217e055a5f5f169ae94d5cdcbc4b1ea043661fa2c2ae","ssdeep":"","tlshash":"372123f30368b7aea4d49b045be0b69433b6d18432b351d547c736176c0767bb674938","first_seen":"2026-03-18T16:51:14.10702Z","last_seen":"2026-03-18T18:55:55.956679Z","times_seen":2,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_coins_dark.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_coins_dark.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1994\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4399,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb7235e478f5040cc33ba52ec89e1de4","sha1":"7be8e256a5f733ec352ef6e225eb0ff962e09c36","sha256":"6996d3e0a653d7e2752be5f40029e4af618b54ec75c631d53812ab1d832366d3","sha512":"ed553434aae81e38413c7470a0d135fe6016724a12039961226959437cfeb4e4676ff9563e62e3ee018f9eb45e0162eb6ff2a5f427ebbd171683dab82e2ef287","ssdeep":"96:Q7z2JWK/YjXbNf7ToQDbBF0/4rI//sQXbwvjKcoYTQgIpD7m/4FgU:Q7ajgjLNzcK8/4rI//sLj/tTQlpD7KwR","tlshash":"519175b70370deece9d01b984f643e5923beb5de743346d0478f1429ac576b36128aa0","first_seen":"2026-03-18T16:51:14.108115Z","last_seen":"2026-03-18T18:55:55.975561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":528,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_414_0/static/js/widget.3353b867d867ea9ecfde.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_414_0/static/js/widget.3353b867d867ea9ecfde.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\nvary: Accept-Encoding\r\netag: \"69b8ff3b-8f264\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 52059\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0oc3ZlWUPRoSx%2FEVNJmnkOZIBJm2QPxxE7NL%2Fs4Y2Ly3F%2Fy2ltxVSSFJDFT642GnmJ4VIHyIMmD%2FhodhDCA4PNprlgUlykoyhlQ0gg%3D%3D\"}]}\r\ncf-ray: 9de5bd0d9a631382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586340,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ff0911de5fbab76d427ed5553bfa7826","sha1":"d1d790c48c8554d056e9f974dfe4c27a781f1f35","sha256":"7c522259872c7dcb772053e5686496475eef7c23a5a5ed0f4adf63a4f9c131b5","sha512":"6f3b72057d50065af7343f50387f48360396efeb700ed33e41648bf5c5f73f1c4a754dd35f25d1f60cc7fd94ffbe299994e45b2ff74f3bc7f32cebc36d355d32","ssdeep":"6144:dYDH0ukFmcq0mEn2tl0rEfLEz9fWjLUP7arRGKErehbzisAk72J9UH+kizW:dY4ukFm0ulXfLEjalcehbzqkCZzW","tlshash":"d9c41ad871d2f06247e312a6407f1107f33e5959380d8490f668edeab87958ea237fad","first_seen":"2026-03-17T09:22:11.102735Z","last_seen":"2026-07-01T04:27:22.174919Z","times_seen":67,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/css/fonts.min95d6.css?v=X9hRT0mmqYM_aVXAo7J0h3JIkDZBvPSfJt_Can8N8M8","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/css/fonts.min95d6.css?v=X9hRT0mmqYM_aVXAo7J0h3JIkDZBvPSfJt_Can8N8M8 HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 483\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13077), with no line terminators","md5":"e41d0c21e7e16400d8197aa8508a054c","sha1":"84bc77fd432737decd4c358474f1eae432752906","sha256":"5fd8514f49a6a9833f6955c0a3b274877248903641bcf49f26dfc26a7f0df0cf","sha512":"5e152568998979b43be6c7807ef5d59b412ddde563b7437d249d7209a41f7dafd83a6c44603d0776e1770d126da80b8be725f266816366b8c3ae3cc282f7546f","ssdeep":"192:yHC86EkT86vNo86uSh86ZDm86owH86DJM86Z7XQtMyY86tPq86O:/dW7E5iZ7X2fkgO","tlshash":"3942b2355117a141d6978d9330cdbb17b80e703265b64023e91dade49efac3b07e6738","first_seen":"2026-03-18T16:51:14.110096Z","last_seen":"2026-03-27T06:38:41.258481Z","times_seen":3,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 29 Aug 2023 01:36:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29739\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-10T02:47:50.256665Z","times_seen":184796,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.js HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 May 2020 13:05:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4420\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14690,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14690), with no line terminators","md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-08-09T21:38:00.010331Z","times_seen":10360,"resource_available":true,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_414_0/static/js/chunk-WidgetIframe-3353b867d867ea9ecfde.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:49.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_414_0/static/js/chunk-WidgetIframe-3353b867d867ea9ecfde.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 16:50:49 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b8ff3b-67786\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 120722\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXjK7RKro4BIBUooCGMx6nuwzWDwRSjdomLfyWHjPg3qCErbtNEjhs7UgVrRZyLThrzn7xL5PY%2BIqmc5F1cM1Mjaz6eL9lArM8jgIg%3D%3D\"}]}\r\ncf-ray: 9de5bd121b2b1382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b41c7665d2edf7b642efedb4912128ec","sha1":"09959a47ec5e115983c36517ea05834d672aa34a","sha256":"8b0478540a4df1ea946d175eb78479e531f3efbe43160aab644cea94c7c8062f","sha512":"e0c8b3cb88422f4f2510fec49fa845357a807ce6bf9e73aaaed825f30be0da78630183ac864ad92f9153a371e22ec3f727435d2b3c096fd29ac33c8a19c07f35","ssdeep":"12288:U9k2lcFfj1qLy9ZbRiQoBvomrCF4r9IF2mHKP01:8lcFfj1qLbBVrCF4r9IF2mHKP01","tlshash":"f6947dc67043746cbba352aad4a7540c777e340dba4c84a8f6bcbca415894d5a373fac","first_seen":"2026-03-17T09:22:10.999306Z","last_seen":"2026-07-01T04:27:22.18688Z","times_seen":67,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.1/umd/popper.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.1/umd/popper.min.js HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 May 2020 13:15:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7218\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21233,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21060)","md5":"1022eaf388cc780bcfeb6456157adb7d","sha1":"313789ca0e31b654784dbba8b0f83f364f8683b4","sha256":"fe28dc38bc057f6eb11180235bbe458b3295a39b674d889075d3d9a0b5071d9f","sha512":"b9bb93f19f3c5b17b3812a9fdd12ee362e659a3b2d8897327b3c77e32214da0007a27222dbb35aedab6acd46423a8638084c5aa05ba6cceb054360a1f88fc70b","ssdeep":"384:wnM6G590O7dV9nNbRGCB9D45Hkn5vj2xpOxvIAgD75zBS5vISg3gzopL9TidOgHX:55l7X/jD45eSxpOxvKD73S5vTzwL9Tib","tlshash":"2b92a3dc3294b06643a791a7a0bf960eb2339875610e9410f198f2d97c30ef9917fd7a","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-09T23:48:40.24743Z","times_seen":19036,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nestfincs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:44:24 GMT\r\nexpires: Mon, 15 Mar 2027 05:44:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 299184\r\nlast-modified: Mon, 11 Jul 2022 18:57:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30928, version 1.0","md5":"ac0d2859ea5f8fd6bcb3c305c08ec184","sha1":"7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7","sha256":"ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780","sha512":"2da77a65f24b3a0348259774be36cfe6149abf805d17d7d8cc58a3513446c9e505da06a8d73dcb1448ee1c4414b25b074a8b85ab19dec1d5130b179388265c40","ssdeep":"768:cqIWUWfTJuJ3SRXdbmE/PBNN+6GT4XJxay/DGHNUJSE:czibIJ3CkE3jN+yLCHNUJSE","tlshash":"52d2f1e4b4a49f20cb39ecb828ceb0e45c6636f88d666472d9d8359a0377ddf14671c0","first_seen":"2023-04-05T12:37:53Z","last_seen":"2026-08-09T03:21:16.582718Z","times_seen":9490,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":126,"dns":0,"connect":20,"send":0,"wait":8,"receive":2,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_commodities_dark.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_commodities_dark.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2215\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"668a602f4146188ce5c242495e455761","sha1":"ead35964e3682ca022c383609d838b5d7444741b","sha256":"c52eea532217002f24187031e2900796ad50af41980e9eedd5545df5874267b1","sha512":"dacb4506dbf0ceba9e87c9b23ec2a09e4f37680c8d8c2af8f21f901d413e2b345d9a3e864936e50b913d6495196b8146a0b645db6b96328c1ab72c4e68818bc5","ssdeep":"96:0bTIUzrA4Ta+cmUELfBUtJMS9bHaN33XuAiZ9PsiYWQlzvv:SZ8yGOSl6N3HuD90Aa7v","tlshash":"0e9185760375c7e8e0c0975c6b206ece6bb964e974b193c0db1b2a555d47af37628c20","first_seen":"2026-03-18T16:51:14.114782Z","last_seen":"2026-03-18T18:55:55.942664Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/other/shares.webp","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/other/shares.webp HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/css/responsive.min4d3e.css?v=LlcYhxlAlHvOzumn4FATVxvxHvHVOn1TLJL5WvweolY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41342\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41342,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f21469d4c0cf776ce888f29ff687b52","sha1":"ea704c6a215def3b67cf5fe2b78fcfb3cf02f1c6","sha256":"597bc6e9093afab580e7af297e7cfa0031ddabcb869496520114a3464faea002","sha512":"0727539a9723a6f04569afee2c9fe560a87d233402cdc7bbfa0b9322115de22cf7a0385a9785f341bc7cf2df77c1631ad947a2c8f6e7c2487b44a225a7650b9a","ssdeep":"768:thGl294+TZSBvxgCSWjrQb9bPT1v1OD9M30IVj0OWzmzfrCc6PHXxAit:thZjZSBvVjC9b7NMxM3Xj0O5Cd3xAC","tlshash":"5203bf227df2f706cd99ebbe88dc16c54e9b49834a40dd4a74ae8d430f16be0ec5a011","first_seen":"2026-03-18T16:51:14.116102Z","last_seen":"2026-03-18T18:55:55.976657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":610,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/other/re-deposit-bonus.webp","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/other/re-deposit-bonus.webp HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/css/responsive.min4d3e.css?v=LlcYhxlAlHvOzumn4FATVxvxHvHVOn1TLJL5WvweolY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39902\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39902,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e48512f20e16f0ddc484e6b8b978f9f1","sha1":"cc9b1e71d1e2c13775ce00676ea9935efa2931e2","sha256":"7cd11756ae525ef7cf54be463ff4afca746aed41313eb8dedf605e1d9222054c","sha512":"47e34525c31f45a695e4a4a73b213e628a9be66d5a0f28c9da0cd2baf6808bf74b523abb26411b2115a3040600eca4840f41d9aae0f59e21dbb2c22507c08a20","ssdeep":"384:3zoQXwIsSVAImneYyrQ/pxnKH/nxYo64366tpG85VgvZ/2tLoUbLLi7O51k:3XhAIgevErKH/xp6cFB5VgvwJbLiL","tlshash":"5d03cf01d8f179d0c65caf7a0ade244a09931b438640ad4f7eed8e238f19f85ced7495","first_seen":"2026-03-18T16:51:14.117287Z","last_seen":"2026-03-18T18:55:55.96055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//notification-sound.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4//notification-sound.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 28255\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\netag: \"69b8ff3b-6e5f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 53104\r\ncontent-range: bytes 0-28254/28255\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4kl3n%2B%2F5f9Bm9hVnyF6TenTO%2BDx4iGYoWc97wH%2F3VxXsYgfkzl8hnrOV5JWFxOxzUuAqy3FwfkTtsAcxJQzC56hQyFNjlwPE9Yi4w%3D%3D\"}]}\r\ncf-ray: 9de5bd0c985d1382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28255,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"ed632238ac260d2ff13a5b319163ea80","sha1":"ec3d658a6b985654354abd43c1688d9d020f9eee","sha256":"b43cdddf1836f84ff2873a9716fc541205e42ab4ee6163495fc5d9fa11a475ea","sha512":"951d0ec7b29dad74312dd617d2b715863f417e64e29702535ba6e9fcf231a8dcc2f3de89d5abee1b51fe03f7d3209eae13c17ca04878d7634e3841714e2059d1","ssdeep":"768:N4mLXoawnNyci56NczRzQJhvEgmTKBm9zt1J85voWDmrpNxe:SooaE8B6CzRAhsBmBm9zt1JVlrpNxe","tlshash":"d4c2d0c724248328f92a0db47cb70aabc250bf6804b14be6e34e93015eeffc50f4955a","first_seen":"2025-04-16T11:16:17.238101Z","last_seen":"2026-08-10T01:56:59.517184Z","times_seen":7115,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nestfincs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:44:24 GMT\r\nexpires: Mon, 15 Mar 2027 05:44:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 299184\r\nlast-modified: Mon, 11 Jul 2022 18:57:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30928, version 1.0","md5":"ac0d2859ea5f8fd6bcb3c305c08ec184","sha1":"7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7","sha256":"ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780","sha512":"2da77a65f24b3a0348259774be36cfe6149abf805d17d7d8cc58a3513446c9e505da06a8d73dcb1448ee1c4414b25b074a8b85ab19dec1d5130b179388265c40","ssdeep":"768:cqIWUWfTJuJ3SRXdbmE/PBNN+6GT4XJxay/DGHNUJSE:czibIJ3CkE3jN+yLCHNUJSE","tlshash":"52d2f1e4b4a49f20cb39ecb828ceb0e45c6636f88d666472d9d8359a0377ddf14671c0","first_seen":"2023-04-05T12:37:53Z","last_seen":"2026-08-09T03:21:16.582718Z","times_seen":9490,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":221,"dns":1,"connect":24,"send":0,"wait":8,"receive":3,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/favicon.png","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:49.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/favicon.png HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 18 Dec 2023 21:45:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39813\r\ndate: Wed, 18 Mar 2026 16:50:49 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39813,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6a3b39b1a4bdb8d71969010a37acaf7c","sha1":"6be53e233fb9e3178324ed364bb08cc43abe85ef","sha256":"89718cfaf0e98438ca4f2e660c532f148ce052a1bbd3f1cee1c92a14bec86f74","sha512":"13a0d48bc29220545c1efb1d8fcce06cc6df6f5d0f4becee165b3134927d62e983d813302dd313c55c54a7b5127c2406ed329c35d8b30619fe23cb50cb62e9d8","ssdeep":"768:Q+alNySB3FranT8oWicNxBdJ8/D2cmXwW8y9WvHOJX3nnLqa1emE4:XsgZexLe/DENWvHMHea1a4","tlshash":"2003e2369d9efc27ecd2a2bd9cccbbd5e14385498e77890a5823441dd719f234a53503","first_seen":"2026-03-18T16:51:14.119327Z","last_seen":"2026-03-18T18:55:55.946484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//notification-sound.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:50.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4//notification-sound.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 18 Mar 2026 16:50:50 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 28255\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\netag: \"69b8ff3b-6e5f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 53106\r\ncontent-range: bytes 0-28254/28255\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwJnmhk%2BRBJbViH0wp1ffZ8shaXCHlBR18TyZO5vLaIt%2BAFCf%2FM3Juy8koNS64D%2Fk0zcFonBJcuoOvleIR0CX6dWkzuWVZukXLw8EA%3D%3D\"}]}\r\ncf-ray: 9de5bd19f98f1382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28255,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"ed632238ac260d2ff13a5b319163ea80","sha1":"ec3d658a6b985654354abd43c1688d9d020f9eee","sha256":"b43cdddf1836f84ff2873a9716fc541205e42ab4ee6163495fc5d9fa11a475ea","sha512":"951d0ec7b29dad74312dd617d2b715863f417e64e29702535ba6e9fcf231a8dcc2f3de89d5abee1b51fe03f7d3209eae13c17ca04878d7634e3841714e2059d1","ssdeep":"768:N4mLXoawnNyci56NczRzQJhvEgmTKBm9zt1J85voWDmrpNxe:SooaE8B6CzRAhsBmBm9zt1JVlrpNxe","tlshash":"d4c2d0c724248328f92a0db47cb70aabc250bf6804b14be6e34e93015eeffc50f4955a","first_seen":"2025-04-16T11:16:17.238101Z","last_seen":"2026-08-10T01:56:59.517184Z","times_seen":7115,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_arrow_right_dark.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_arrow_right_dark.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/css/responsive.min4d3e.css?v=LlcYhxlAlHvOzumn4FATVxvxHvHVOn1TLJL5WvweolY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 157\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":212,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"491aaab4c0cfec692785d757ff6be358","sha1":"895cdbb3793ea25481ab331f388b84a180991cac","sha256":"8845a447495fc828c6b975c62813dab05c5e90bcc931a21b4987df92cec690e9","sha512":"277d50785109d58556c3c67f1780d38516eae0af76ea7b18b8504c6c8dbe828beb52ed0fe8b8ee00763f25bbd2d5aa589e2913837b397c77eeb54e088688fd79","ssdeep":"","tlshash":"b8d0a7d8608c4809c93645919aed3c82044ef252416201cef75424171827889248d619","first_seen":"2026-03-18T16:51:14.121233Z","last_seen":"2026-03-27T06:38:41.23361Z","times_seen":3,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nestfincs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:44:24 GMT\r\nexpires: Mon, 15 Mar 2027 05:44:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 299184\r\nlast-modified: Mon, 11 Jul 2022 18:57:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30928, version 1.0","md5":"ac0d2859ea5f8fd6bcb3c305c08ec184","sha1":"7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7","sha256":"ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780","sha512":"2da77a65f24b3a0348259774be36cfe6149abf805d17d7d8cc58a3513446c9e505da06a8d73dcb1448ee1c4414b25b074a8b85ab19dec1d5130b179388265c40","ssdeep":"768:cqIWUWfTJuJ3SRXdbmE/PBNN+6GT4XJxay/DGHNUJSE:czibIJ3CkE3jN+yLCHNUJSE","tlshash":"52d2f1e4b4a49f20cb39ecb828ceb0e45c6636f88d666472d9d8359a0377ddf14671c0","first_seen":"2023-04-05T12:37:53Z","last_seen":"2026-08-09T03:21:16.582718Z","times_seen":9490,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":106,"dns":0,"connect":7,"send":0,"wait":11,"receive":3,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/css/bootstrap.min.css","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/css/bootstrap.min.css HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 20 Jul 2021 06:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21653\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":161409,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65326)","md5":"d432e4222814b62dd30c9513dcc29440","sha1":"2cac4afc120983921411296bd4e8fd8a94ba237e","sha256":"4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601","sha512":"3f9320327d6304dd356ac060534cfad10938431897a3cebec2515a84aaec41fdfb73d72ba39d7b5b35523cf575b432b3864bb6889d855602faef01b4dd21a734","ssdeep":"1536:iC7AIJkTR+rMqFVD2DEBi8yNcuSElAz/uJpq3SYiLENM6HN26R:d7XXGLq3SYiLENM6HN26R","tlshash":"8cf353a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-04-05T05:11:52Z","last_seen":"2026-08-09T23:32:51.142102Z","times_seen":13644,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Sep 2021 16:10:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12411\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60313,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60127)","md5":"409d058da0ed3dd888145600bd72d12b","sha1":"1e8741f6b8d8c87f7be0c93cbdca16d246a45b5b","sha256":"fe23e80255592384d748b23ef2fbf446188fea5d717b4e91e0333da5a0340b93","sha512":"ce90491c391e909c774a125d300cc945e717df3aa34fe83fa4fb220b20ee8da5f401080b0c6d126ee2674a1afed7fb172798b58d62a822313cda89a3a838732f","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzdo7RZ5fqpvv72+NTj3T:PE0PxXE4YXJgndFTfy9lQJ","tlshash":"c2430bb8e54c01dab731c44bbf82b2bc61b6f73ce5914d95f00e591c2ad16a811c5fba","first_seen":"2025-07-07T21:08:25.06533Z","last_seen":"2026-07-13T17:36:44.989932Z","times_seen":18,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nestfincs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:44:24 GMT\r\nexpires: Mon, 15 Mar 2027 05:44:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 299184\r\nlast-modified: Mon, 11 Jul 2022 18:57:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30928, version 1.0","md5":"ac0d2859ea5f8fd6bcb3c305c08ec184","sha1":"7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7","sha256":"ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780","sha512":"2da77a65f24b3a0348259774be36cfe6149abf805d17d7d8cc58a3513446c9e505da06a8d73dcb1448ee1c4414b25b074a8b85ab19dec1d5130b179388265c40","ssdeep":"768:cqIWUWfTJuJ3SRXdbmE/PBNN+6GT4XJxay/DGHNUJSE:czibIJ3CkE3jN+yLCHNUJSE","tlshash":"52d2f1e4b4a49f20cb39ecb828ceb0e45c6636f88d666472d9d8359a0377ddf14671c0","first_seen":"2023-04-05T12:37:53Z","last_seen":"2026-08-09T03:21:16.582718Z","times_seen":9490,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":107,"dns":1,"connect":7,"send":0,"wait":9,"receive":8,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_tier_light.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_tier_light.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 842\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1828,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"083922df653f5cd6859e3c161f114728","sha1":"827a535f2ef66c73bcf8f58761a16148ca993d2c","sha256":"c76d371650b0030a7d76d2306ae79c18b8ddccb7ace6c7b16e62f9749b3da37c","sha512":"4c3c2bd8d9b69bfa5bdb9aee8e89aec71227ee39547fe7daa775fef9ea7dc10d47a9d4b486f4fc4dd54a1ee29c3b2dbe02ef5cd8ca342921e600f22fcf8b7654","ssdeep":"","tlshash":"8c3122f31399d891996197009ad81dd8e13dfaab727320c4b71f38271a336b3713ea11","first_seen":"2026-03-18T16:51:14.124099Z","last_seen":"2026-03-18T18:55:55.951297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/js/bootstrap.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/js/bootstrap.min.js HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 20 Jul 2021 06:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14365\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63467,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63188)","md5":"f0c2bcf5ef0c4476508d79ec9cdcce07","sha1":"3beed68ed7d753c6bf4f61c26386ddd7929ba030","sha256":"edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba","sha512":"5ca6bd1de99dcb5522dca486809760332625520d6033e4212fa7279724dedaaccc0989b89c06753ec55ead0cd34d7ce89d447e766b301ea8093eec02ab531a02","ssdeep":"768:0KD1OYYUhTVvO1Nn6u7MTLOarIkSsBAiAH0FcQ2K8FXsb6mH/3bz5vhCG:0G1T145KVdsXc/hhCG","tlshash":"a453750672a4f472059fa176803b0a0bb7362c9de506b16cbad998dd1f7cd443267f3a","first_seen":"2023-03-07T01:03:47Z","last_seen":"2026-08-09T15:58:06.424127Z","times_seen":10823,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T16:50:46.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://nestfincs.com/site/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Wed, 18 Mar 2026 16:50:46 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78569,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T02:49:09.65511Z","times_seen":17809966,"resource_available":true,"data":null}},"time_used":1233,"timings":{"blocked":174,"dns":100,"connect":34,"send":0,"wait":878,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/other/first-deposit-bonus.webp","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/other/first-deposit-bonus.webp HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/css/responsive.min4d3e.css?v=LlcYhxlAlHvOzumn4FATVxvxHvHVOn1TLJL5WvweolY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37414\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f618f5c2f3eb0691d6d8a9ba7f725cd3","sha1":"b21a30d00f49560be4c1d1885ce70b60c435ad35","sha256":"53c7f575c23d0424b441d44ac8e0ea25a7cbf6ad1461e742c7004dea4364e304","sha512":"3a091c9d31173ce60c0be55e9c9e6a8d006c55228a41841d97f823eb813466d533ef4e969cf55e686c1ad5332fe039cffdbcf33e1b34c2e6dde1ec4c8b553c04","ssdeep":"384:ieo7jN1c+4ra3IdlVBXaibLdUKChRDenWqSiC/n0C96TnmJHgWSCcDiUO51k:i17jN1V424d/hdU9D0zm0Lm9gZCcDiS","tlshash":"27f2ae22ee73f466c50ae33251e4240dec833e07a405ee48f96c28771f53b859e8e59a","first_seen":"2026-03-18T16:51:14.126344Z","last_seen":"2026-03-18T18:55:55.95257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":800,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/media/n1cm-video2.mp4","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/media/n1cm-video2.mp4 HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\ncontent-range: bytes 0-236197/236198\r\ncontent-length: 236198\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":236198,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"904202549fe47ba9a24b40ad7da30b15","sha1":"c7c885520a845c3f75209b1c4ae50cf10950fbc0","sha256":"489513a1bec3aa90963cbd48772037f9dc3a05efd9ff59176aad4ec75c10bf0f","sha512":"1d13926a0f192979e86444589a1f7599b8869dbf4ba512638f4d9752f267ee1652112e9c248db59109a566108c27c5de4f9f2a318680ad60b51c3cc5693770e3","ssdeep":"6144:e8YhIzD62S/Szz6BDVvPHKR7k7bKq3WZdgLZOI:WCm2oSf6BDFPHKO6bI","tlshash":"a3340289ab3591d7e028267d7ebfc7893a77d808ab40874a03513b04fc35694eee97d4","first_seen":"2026-03-18T16:51:14.127785Z","last_seen":"2026-03-27T06:38:41.28994Z","times_seen":3,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":403,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_bar_dark.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_bar_dark.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1295\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3012,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f323843bb254426e40a4aca743ad2481","sha1":"a11e5d9940aaf6c915bd7a1bc99deea64344853d","sha256":"74acfdcb84dd1d9181330859ff8e7c16f2a38e866cc1865cb27357a35feebcbe","sha512":"974c0001869ddf603891972b49a7aa2989975a88cc20b9de8d5d5b93f8cc215ae3ba3bad27af72b7c2824639070f861773e7961b6b469b442c1aff04ee0a973b","ssdeep":"","tlshash":"1e5174f71328e9e5b6d027645f993acd373df9d5b2b524c0a743282a9880977103ee70","first_seen":"2026-03-18T16:51:14.129158Z","last_seen":"2026-03-18T18:55:55.948068Z","times_seen":2,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_spreads_dark.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_spreads_dark.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1456\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4561,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd6199352ea3a90ca46b579f0fde60a1","sha1":"f2718e75b5c7d75b3698a3e7fe7d8bf87e9a64ba","sha256":"cc82909ea78753574f21921686b988d8ed0e6edf1f588c2ff3a87c75210ca750","sha512":"ccb9771e2a2087f79475ac24584fdc7468de797a12b050823fdd0628cdac2b3abc3719decb92368faac249e6bfa68aed68f6b416fc2bf505321765db5bb18702","ssdeep":"48:+4/N36Y+53fmYW3gfML3DriXWo/eB87n22BLjW1VWUEEuSvqpja61agfD7ycSaX7:+Y6YG3fLW3gELXy1o87nHVmqZhBnO6","tlshash":"989163b230e889059a704740dbc48dd8a67ef1ee709344c8778d31572f3a5a7b2af65b","first_seen":"2026-03-18T16:51:14.130548Z","last_seen":"2026-03-18T18:55:55.969628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":531,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_414_0/static/js/chunk-WidgetIframe-3353b867d867ea9ecfde.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_414_0/static/js/chunk-WidgetIframe-3353b867d867ea9ecfde.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b8ff3b-67786\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 120721\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEfUDVfhLOnkGZOVydTnd6kjxPAOc0FBrQtgVwMMcIzp3FVz1oI5aQteOZG5AmzCAMrCklEa%2BF8xwe5v1%2BNcQXNee29g4QPkLTHh9Q%3D%3D\"}]}\r\ncf-ray: 9de5bd0c78351382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":423814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b41c7665d2edf7b642efedb4912128ec","sha1":"09959a47ec5e115983c36517ea05834d672aa34a","sha256":"8b0478540a4df1ea946d175eb78479e531f3efbe43160aab644cea94c7c8062f","sha512":"e0c8b3cb88422f4f2510fec49fa845357a807ce6bf9e73aaaed825f30be0da78630183ac864ad92f9153a371e22ec3f727435d2b3c096fd29ac33c8a19c07f35","ssdeep":"12288:U9k2lcFfj1qLy9ZbRiQoBvomrCF4r9IF2mHKP01:8lcFfj1qLbBVrCF4r9IF2mHKP01","tlshash":"f6947dc67043746cbba352aad4a7540c777e340dba4c84a8f6bcbca415894d5a373fac","first_seen":"2026-03-17T09:22:10.999306Z","last_seen":"2026-07-01T04:27:22.18688Z","times_seen":67,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//tururu.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4//tururu.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7224\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\netag: \"69b8ff3b-1c38\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 53104\r\ncontent-range: bytes 0-7223/7224\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QMoH%2B4NwoMHPNPb%2FZasMC5LSAeCF7cj6Idkyi3P%2FEHgMkSNIlmUg67N%2BoYlaF6Omq%2BLAJcXbI4qSgzN6nxWX1DAr64lZBEFCb8ZqUg%3D%3D\"}]}\r\ncf-ray: 9de5bd0c98551382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"5061b4d134a7b4d5d744f9a127b757a8","sha1":"c5e240ac60d3914cb3836ba6652105c67720b845","sha256":"12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f","sha512":"bbd050943fd3129822d687f7733034989faa672e543d5fcc0f1bfc69f5af9c7ff3a4c6e1cd55011383760cef14351527f6de22cfb91b25e8d2ac201fc9b9c7c0","ssdeep":"192:2DjGr+6EnIPwZeM/BCepDxN8XcqOBO+JlRh:CjfxnIPkjpDP8Xcg+JlL","tlshash":"11e18c1937f3e09ed620177642d43664fcd01d8017e2945b25a8baebf13e3cbc26a961","first_seen":"2023-04-05T10:44:18Z","last_seen":"2026-08-09T22:51:24.654153Z","times_seen":9370,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 May 2020 13:04:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 915\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-08-10T01:49:01.328265Z","times_seen":43570,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_calendar_light.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_calendar_light.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 819\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73c6d11fbce442ae1d9016ed81efa98f","sha1":"63b3ea22f5a38d43e772f6426c18c201a2ebdf7a","sha256":"8b344452aec7bfac1c983fff7444476aa7be5c9c53f99a42e7bdc260ccc8b9d9","sha512":"a074284d279d9cd9d84177f67743beaa878766eede8160d59229833201cf9a11d21c8624f26b3a17f56f9de41861d8f3c3ac9527aceee95ce24d5d0d937cd37c","ssdeep":"","tlshash":"223124f30294d97444b8cb987afc5940b336f0da79b24188bf5f7c1a9c6b4d72035156","first_seen":"2026-03-18T16:51:14.133526Z","last_seen":"2026-03-18T18:55:55.955426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_time_light.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_time_light.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 687\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1457,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f7b9fe3275966d5ec2e787cf75260e96","sha1":"eb59d94944fe9a4434c8f5fa239175ac0162facf","sha256":"ddd9e326e6fc4dca3dcdd762ec6da4ac0f326d6bcc11ba3a2fdf37979a8d9ecf","sha512":"32cb1e33465d584a6817b5cb4d8cae48317573afb97c4162251a48f941cdce85aed5e4648a84df6c891bc67e1a8a4329634d587862ffb29799d58962418547a5","ssdeep":"","tlshash":"e13110b711b9d8a4afc2138d1f80adc872a1b1aeb1b344c4d31a2b118d5b0f3343c962","first_seen":"2026-03-18T16:51:14.134784Z","last_seen":"2026-03-18T18:55:55.940271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Sep 2020 09:33:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4828\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-08-09T23:46:28.577311Z","times_seen":32482,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/js/main.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/js/main.min.js HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 13 Nov 2023 07:14:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 817\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4588,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4588), with no line terminators","md5":"40c3ad61eb1de27bc8b9cbaa9a345816","sha1":"3fa85103832e11e3dd0b14d9e42c898be4ec57d7","sha256":"9b6760c485cb5ed0b58bb060b07cd6d67161e80351fe9092f497a9f2c32b3b2c","sha512":"908035e4c02ba3c5eb7e550ac4af2b062ed68d30478cbbfe240d82a3c15b4cf5b19a0a7b92045302082a585076bf56d6442237d80bb41c01045c0a84ca2cb6fc","ssdeep":"96:XigSCvDdKjE1rIlITt4I8IK5PE1rIlITkt4I8IK:7DaJPZA","tlshash":"c091b00ce757787402be1866d94e2ec5068e0e2ad28b90e2fd22517f05fddf8e66194a","first_seen":"2026-03-18T16:51:14.136958Z","last_seen":"2026-03-27T06:38:41.292316Z","times_seen":3,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/other/main_apps_bg.webp","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/other/main_apps_bg.webp HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/css/responsive.min4d3e.css?v=LlcYhxlAlHvOzumn4FATVxvxHvHVOn1TLJL5WvweolY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25264\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x964, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"babc2c1b76ab70934d598b077a8d86ae","sha1":"db3eb0a0d2e1f3b4781e620948ff26caf38b77ff","sha256":"6fc2aad613419f8dca21035778ea06710811d247708d5532941a306f7b24a8ab","sha512":"555533081ba9c2fed2506f915427c0bb76c76132efb61dd9bd6e68af685c28962b2e7ed2d3da55a312aed32edb45eb2d8182bf6f89e55d67d9b97f03cb4aabe3","ssdeep":"384:bDmPW140rl1j+2Z8litMoEDK4lVwn8lDHOuCNBGpGQl7QLBkSNmz6Xcza/PoS+CV:RrDvTVEm8RHOdCl76qr6Xc2H+s","tlshash":"9cb2e197a11184e87eb5ee36f8c43eb25d9dd43fbd1e439207e427879c98159cc190e2","first_seen":"2026-03-18T16:51:14.138248Z","last_seen":"2026-03-27T06:38:41.275343Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//tururu.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4//tururu.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7224\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\netag: \"69b8ff3b-1c38\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 53104\r\ncontent-range: bytes 0-7223/7224\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNeDPeTIP9vnixxKbMVK0C4k1iVbuMPgcaQyS8pYlSc%2BJoIVBWr2j3GIBSI46uZ8afyVmsnmZjIBTIpeuljcSKYlvZRaKSSf6Jj7XA%3D%3D\"}]}\r\ncf-ray: 9de5bd0f3d6f1382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"5061b4d134a7b4d5d744f9a127b757a8","sha1":"c5e240ac60d3914cb3836ba6652105c67720b845","sha256":"12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f","sha512":"bbd050943fd3129822d687f7733034989faa672e543d5fcc0f1bfc69f5af9c7ff3a4c6e1cd55011383760cef14351527f6de22cfb91b25e8d2ac201fc9b9c7c0","ssdeep":"192:2DjGr+6EnIPwZeM/BCepDxN8XcqOBO+JlRh:CjfxnIPkjpDP8Xcg+JlL","tlshash":"11e18c1937f3e09ed620177642d43664fcd01d8017e2945b25a8baebf13e3cbc26a961","first_seen":"2023-04-05T10:44:18Z","last_seen":"2026-08-09T22:51:24.654153Z","times_seen":9370,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 May 2020 13:04:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11139\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-08-10T01:49:01.395427Z","times_seen":67022,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/other/safe-place-to-trade.webp","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/other/safe-place-to-trade.webp HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/css/responsive.min4d3e.css?v=LlcYhxlAlHvOzumn4FATVxvxHvHVOn1TLJL5WvweolY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47384\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92ee0fb9d1312a278ab881f85f60e2ae","sha1":"fc85128fa213a53746eda7a06cae5537cfc1c862","sha256":"a5c219906338ca755887a1892070010616ef92b59f3cefc6fa45bd8f0852fe04","sha512":"9cc7f8bda6c60f159c99db83527f83eefcd25b21f42adfe283a94d08c84ffc8aa81db647c8339b74bef75d0590a560f906d879a6e010badd645f9bd7061fc2dd","ssdeep":"768:HwSbZdXsbxbTnufdltUlCDHCAs0oW7tohjsHntoQMn+HZTfMXkiS2:HhXrlGlCDHReotohjsHtoQMn+8k4","tlshash":"2f23df299cf2b003e64c67ba15e914609dc71fd391810d08f9be64469f31fb9ae9f286","first_seen":"2026-03-18T16:51:14.14021Z","last_seen":"2026-03-18T18:55:55.944875Z","times_seen":2,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/css/style.min5a97.css?v=TL6q7eYbOiHQX8bWsV2F7W5imGhbHFEPDZuda3DEuLg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/css/style.min5a97.css?v=TL6q7eYbOiHQX8bWsV2F7W5imGhbHFEPDZuda3DEuLg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 05 Dec 2023 05:50:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2820\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17661,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17661), with no line terminators","md5":"7705515e155ad19030921a7e5c315417","sha1":"d1a64b66e5f7e9e88e4e203e1145c6c8532a0bd8","sha256":"4cbeaaede61b3a21d05fc6d6b15d85ed6e6298685b1c510f0d9b9d6b70c4b8b8","sha512":"e05a6c467d46042d7712aba64faebcb17f470888dfbe8b993e97a1a4c1961928b50acd29184cfa047b5c3a84f8a619551415a0ad0a64d871a65955c1161b5bb1","ssdeep":"96:/8OAr8qhkVE4hSKd+TXXT8AAqYkZIbfMSzuPxRtbq26TE7uPq6TWts8rVd21msNZ:/9d5AqNfFYqPMVdEmDo44","tlshash":"48822323f28c1044e107d9b178a77fbf763dd102a3111ab6a18677b1878d4af2679f4a","first_seen":"2026-03-18T16:51:14.141493Z","last_seen":"2026-03-18T18:55:55.977735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/css/responsive.min4d3e.css?v=LlcYhxlAlHvOzumn4FATVxvxHvHVOn1TLJL5WvweolY","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:47.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/css/responsive.min4d3e.css?v=LlcYhxlAlHvOzumn4FATVxvxHvHVOn1TLJL5WvweolY HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 26 Feb 2024 00:20:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12582\r\ndate: Wed, 18 Mar 2026 16:50:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102678,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"749c261a6d9efc709e9ef56934648ef0","sha1":"6908a255e4636e41983d8d37022c1331a01a9fd6","sha256":"e4995abccc427220b88ba48537c2acdce910aa10192cfaa73163debac194d6ad","sha512":"2a71686a108c3d936c0525a5d07ea83b404e4130471200bb7b8037d2a24b3d14fe922a3c3f0471bf2a94bc540cb3b8fea2065f489c5c894796cd77ac298b7cbe","ssdeep":"768:hCQTzYmlBMjTNRFPDFmUFoFwFwFFF6cx/rHx8xgcZvh:9Tz8cx/rx8xgcZvh","tlshash":"6ca37451b2862104f503d5f678637f7d62a8a452e26b91b4f6e73479c6cf0c206b3b8e","first_seen":"2026-03-18T16:51:14.143113Z","last_seen":"2026-03-18T18:55:55.98328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_bitcoin_light.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_bitcoin_light.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 884\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1967,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c777bab8eb168e8380440b35e720fdf","sha1":"34a21522de5ed5319c501719afa5ca1b59431c09","sha256":"c9f987e5230899e3a58ebaf71e1f953cd10cdd595ea85add2c15ecfb2d8c544e","sha512":"24cf818847cfba47f4d3d7e2c0ba1fc86a575112e2b9c33d9d45bf9fde38aec0572c066f0d2b3d67b615d695f42d1680b2c8d73cc4454e0dbe8bc70c8ecf0c12","ssdeep":"","tlshash":"0e41eff743a4d9d64ba6c71466ecbec42335e1ed36b201c47709216b582baf33139951","first_seen":"2026-03-18T16:51:14.144259Z","last_seen":"2026-03-18T18:55:55.98778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_metals_dark.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_metals_dark.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1852\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4161,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f514f498e12561214055153e285b4e93","sha1":"8ed6da0c1663cd130f7e7e68ce113d745f5fc3e1","sha256":"5421ec2986f9e2278dc0b3985331054c8d4cc3ddf1a6fdc9f4503c3812c03a38","sha512":"15512b78872f36bf4504697e174e8894438919bc6083e92d2625397e09dd2a4405b6a99c55b0c51030b9c25513b58fdf0ef885c6608b6549527c780a1a51d36d","ssdeep":"96:w+cqIrUcFGXMrfg4BfuI1gh1cd22K2pRuzRtBOhf06pb:AqIrURXMr9cIs1cdRKORuzYhfLpb","tlshash":"fb8182f702b89be8fb9017481fd474d9ab3df4c9a07215c4b393242a4d662f72129e31","first_seen":"2026-03-18T16:51:14.145594Z","last_seen":"2026-03-18T18:55:55.978998Z","times_seen":2,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/fonts/mulish_SGhgqk3wotYKNnBQ.woff2","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nestfincs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27400\r\nserver: cloudflare\r\nlast-modified: Tue, 17 Mar 2026 07:14:03 GMT\r\netag: \"69b8ff3b-6b08\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 120721\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZ96gcNDfwVf27yYOQYGxOfWYE4OfTlQCT8pWxVySkenvr997NdNwp%2BRyv3%2BLuw%2FPFreO8m2sZmAYB9xZaI0aQxo8Umskt%2FWl017eg%3D%3D\"}]}\r\ncf-ray: 9de5bd0c883a1382-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27400, version 1.0","md5":"d96e6550e1c6b3063f60875bfd4a0870","sha1":"c1b22f0d075bd4413686866134fffcccb3f487b8","sha256":"577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8","sha512":"8446c25d840412230bb91806faab73de9dee5da6a8aae2c980431879d749ca8090d6879e6f42e3be27b416a00ee759dee2febc34df97c3ffa81ae15ce2196802","ssdeep":"768:F4xt+sRZS5Y1nK6uicEP3rhaxoQAoF6jLIRt:F4x3fcUrhOoK63IL","tlshash":"4dc2e10fe287737a5418f23ea969c86e365865503a2e67f1dc1a3ab51e18137b3c4f50","first_seen":"2023-04-08T09:21:33Z","last_seen":"2026-08-09T22:51:24.704643Z","times_seen":9412,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_card_light.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_card_light.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 966\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"00cc13b699abde2e40bb3a58cc8cd565","sha1":"4c810a6bfa3f161a4dfa8dae04524322f44d5ea9","sha256":"6fcefd1c3f857992fddc5a16d7e81bdc4daf42156459ae8225e546e24c7e9855","sha512":"bf967c2810fda92ce904861696e3a3df750221b49109ff696e823432ad69c2bc96a5a75ab02f4a6a3cedcbcd7174805c595b7631cbb1479f5cf8e6291049789b","ssdeep":"","tlshash":"814144fb03588ec95fa0930c7f94b59927ebf288f47640d4a75324978c989a7613ed21","first_seen":"2026-03-18T16:51:14.147698Z","last_seen":"2026-03-18T18:55:55.959409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nestfincs.com/site/img/icon/icon_chart_dark.svg","fqdn":"nestfincs.com","domain":"nestfincs.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webmail.nestfincs.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 09:41:40 GMT","end":"Sun, 10 May 2026 09:41:39 GMT"},"fingerprint":{"sha1":"C8:0C:26:9C:E5:62:90:A5:40:C4:F8:6C:C4:11:3D:D8:11:71:73:07","sha256":"40:12:6C:F4:A2:04:B2:FF:1F:8B:F0:FB:C3:96:D7:48:8D:9F:BA:87:5F:16:E6:79:C7:3B:5D:2F:C5:D3:9A:99"}}},"request":{"raw":"GET /site/img/icon/icon_chart_dark.svg HTTP/1.1\r\nHost: nestfincs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Mar 2026 16:50:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Nov 2023 07:38:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1004\r\ndate: Wed, 18 Mar 2026 16:50:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2609,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7bdd8bbff735972d753d7bfac280ce1","sha1":"3f544794516d77bb088cb2093f98a7a4cb7104f1","sha256":"27b2f62eceda06ac84cac77c549bb30532b08a77cb3a6d6f218de6e7a08eb265","sha512":"f4c7e560a85f2c8b61f1148d2012893153b8666c5a1326436b9ae60b7237d88ae088c6f1433a98f2d1acf304b3c2a8179688fbc3a1cd40c10ce78dcaf7513871","ssdeep":"","tlshash":"f35120f313641de466e91b1cfba93e8c337af6d967621cd03707193648d16a7e03a8a0","first_seen":"2026-03-18T16:51:14.148918Z","last_seen":"2026-03-18T18:55:55.964517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"nestfincs.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"nestfincs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nestfincs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nestfincs.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:44:24 GMT\r\nexpires: Mon, 15 Mar 2027 05:44:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 299184\r\nlast-modified: Mon, 11 Jul 2022 18:57:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30928, version 1.0","md5":"ac0d2859ea5f8fd6bcb3c305c08ec184","sha1":"7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7","sha256":"ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780","sha512":"2da77a65f24b3a0348259774be36cfe6149abf805d17d7d8cc58a3513446c9e505da06a8d73dcb1448ee1c4414b25b074a8b85ab19dec1d5130b179388265c40","ssdeep":"768:cqIWUWfTJuJ3SRXdbmE/PBNN+6GT4XJxay/DGHNUJSE:czibIJ3CkE3jN+yLCHNUJSE","tlshash":"52d2f1e4b4a49f20cb39ecb828ceb0e45c6636f88d666472d9d8359a0377ddf14671c0","first_seen":"2023-04-05T12:37:53Z","last_seen":"2026-08-09T03:21:16.582718Z","times_seen":9490,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"socket.tidio.co/socket.io/?ppk=zqxipe9wgscamxmh2bdklsazumafjfph\u0026device=desktop\u0026cmv=2_0\u0026ver=1.414.0\u0026seid=a8ab6e0a-b6ee-46f0-9059-6eedbf0719a1\u0026vid=303r7301s92n9ns7379r05563r22n38o\u0026EIO=4\u0026transport=websocket","fqdn":"socket.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"52.16.57.59","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nestfincs.com/site/","date":"2026-03-18T16:50:48.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Wed, 20 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"52:8F:77:02:20:27:EB:C3:D1:B0:3B:95:A0:9A:54:F6:F5:FA:79:C8","sha256":"69:63:8D:8F:D4:FB:49:A4:9B:3C:48:80:87:0B:15:2D:52:5F:B2:9C:0E:38:74:28:00:22:E4:EF:51:4F:C9:44"}}},"request":{"raw":"GET /socket.io/?ppk=zqxipe9wgscamxmh2bdklsazumafjfph\u0026device=desktop\u0026cmv=2_0\u0026ver=1.414.0\u0026seid=a8ab6e0a-b6ee-46f0-9059-6eedbf0719a1\u0026vid=303r7301s92n9ns7379r05563r22n38o\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: socket.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nestfincs.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: mzFkw3Hih4BL/MBk5h0Idg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nAccess-Control-Allow-Origin: *\r\nConnection: Upgrade\r\nSec-Websocket-Accept: OzFXQBA+F4HXlcztBpWMrqo4S14=\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T02:49:09.65511Z","times_seen":17809966,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":34,"send":0,"wait":35,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}