{"report_id":"9730f5a5-ef22-447d-9c2b-7c2b4fa55f95","version":0,"status":"done","tags":[],"date":"2026-08-06T00:29:42Z","url":{"schema":"https","addr":"nexacrypto.pro/","fqdn":"nexacrypto.pro","domain":"nexacrypto.pro","tld":"pro"},"ip":{"addr":"193.187.110.3","port":0,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nexacrypto.pro/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"nexacrypto.pro","domain":"nexacrypto.pro","tld":"pro"},"title":"Loading","dom":{"size":2441667,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51216)","md5":"09d9d3cb1c910acc9b9519292ad5952c","sha1":"ec0982f1d2207a450fb706ec13f4a0efe343fc49","sha256":"fd1a0187786807dc53ef20c57620dafc2a20c0175b3478e9b1762be2c0e3088f","sha512":"48e5099e37e4985f6bd37562acb62fa38c124a61c918be107ea00c9dd491e828d579f68ffa36fbfed5d917720c2f5009488bd4d7947829fce60489667f8af2d6","ssdeep":"12288:rQ0t8eHOIzJpF+I+VLobNmZtYcYmo/Z+paGnN1LxLiGWVQUeE/ng6o7XbTF7gYUw:btiUJpF+I+VLFn","tlshash":"c1b596963991b5ae048787313a4a17f658bfc505c6ce904df58c9eadf0ecea3299c3c4","dom_hash":"domhashd9fedc4cc384579a446a5266c87bb20c","first_seen":"2026-08-06T00:31:23.84822Z","last_seen":"2026-08-06T00:31:23.84822Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nexacrypto.pro/","fqdn":"nexacrypto.pro","domain":"nexacrypto.pro","tld":"pro"},"ip":{"addr":"193.187.110.3","port":0,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-10T00:29:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nexacrypto.pro","ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-06T00:03:45.93007Z","last_seen":"2026-08-06T00:03:45.93007Z","alert_count":0,"request_count":3,"received_data":2241649,"sent_data":2420,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexacrypto.pro/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"nexacrypto.pro","domain":"nexacrypto.pro","tld":"pro"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"c047dd028d579f8896002f4fee533aea","sha1":"4f2e0beaee72bca0b08acced4275af56bfe8b246","sha256":"e4bd6b711377a33077eb9716bbbe0abfce0074949bec9c13ecc72fe122ebd8e8","sha512":"d7b594fbe1cc7e787dde87c2e2dc907cc813b79a2fa204e6aa5e747fc63e05b496c8915cf1731b4c93f0d71f61be876ca9b87e0d583397e410a1d33d5d7f6983","ssdeep":"12288:/mZtYcYmo/Z+paGnN1LxLiGWVQUeE/ng6o7XbTF7gYUgg5C0NE6LL9Dt5R5hh/qa:EW","tlshash":"a9a523963991b5ae048787313a4a17f658bfc505c6ce904df98c9eadf0ecda3299c3c4","size":2137227,"data":"","first_seen":"2026-08-06T00:31:23.859203Z","last_seen":"2026-08-06T00:31:23.859203Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"map[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://nexacrypto.pro/","line_number":746,"column_number":214},{"level":"debug","text":"","filename":"https://nexacrypto.pro/","line_number":750,"column_number":57}]},"http":[{"url":{"schema":"https","addr":"nexacrypto.pro/","fqdn":"nexacrypto.pro","domain":"nexacrypto.pro","tld":"pro"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T00:29:11.800Z","timestamp":1785976151800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexacrypto.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 15:42:06 GMT","end":"Mon, 02 Nov 2026 15:42:05 GMT"},"fingerprint":{"sha1":"00:F6:6B:07:1D:E5:90:55:C4:73:9D:85:7B:0A:3A:F5:95:B7:91:FC","sha256":"7C:50:75:A7:32:11:1E:FB:81:EF:47:FB:C7:30:22:DC:B6:C2:BA:00:B7:7D:FA:EF:0C:26:73:00:EE:D2:70:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexacrypto.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 23888\r\ncache-control: no-store\r\nx-edge-action: challenge\r\nset-cookie: sil_ses=d53fec3829aa7325e0249a24100d480f; Path=/; Domain=nexacrypto.pro; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=d53fec3829aa7325e0249a24100d480f; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASBkNTNmZWMzODI5YWE3MzI1ZTAyNDlhMjQxMDBkNDgwZgDi3p6nDZxZWqti-tGj.-DLivSqM_xNk76NnQkht3QTl--KCmoGPudApcUq3dhFxB4elwtY2FfSzA46WKl9zG9stYhnjqYJuibm9rgLpDw; Path=/; Domain=nexacrypto.pro; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASBkNTNmZWMzODI5YWE3MzI1ZTAyNDlhMjQxMDBkNDgwZgDi3p6nDZxZWqti-tGj.-DLivSqM_xNk76NnQkht3QTl--KCmoGPudApcUq3dhFxB4elwtY2FfSzA46WKl9zG9stYhnjqYJuibm9rgLpDw; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 06 Aug 2026 00:29:13 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":86199,"size_decoded":24858,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12636)","md5":"f55d858ad9df647a5faa37d9f827203f","sha1":"e0c607b4140d55a2c7f5a27566810aa07b75d3e2","sha256":"ad6bb0e89c2a307681b27bff55a0b5b7c7f650fa74dc6f6471a7ba5a25c7a1ab","sha512":"4c99983ad00da015606646f7810eb426924f7aabaa37d979356dbb646f786f3862127f5d6f8d63fbf0ca71755f9fe7578c664086958e9021b6a8b30f619607bb","ssdeep":"768:GUAQ/p6WajPgGY+w66bxd2l5bgjFWPCS9x2yNvK0ns1e939Hurodcb1OMqtrEp4l:w2bSDqSy2tGPBiTZf1TytXHUoR7R6x","tlshash":"dd83eaf1213160ae81971a79b61f13971abbc621c8c684ccfc4cd9a47fbee531979788","first_seen":"2026-08-06T00:31:23.852062Z","last_seen":"2026-08-06T00:31:23.852062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1948,"timings":{"blocked":-1,"dns":266,"connect":129,"send":0,"wait":1309,"receive":103,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexacrypto.pro/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"nexacrypto.pro","domain":"nexacrypto.pro","tld":"pro"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-06T00:29:14.422Z","timestamp":1785976154422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexacrypto.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 15:42:06 GMT","end":"Mon, 02 Nov 2026 15:42:05 GMT"},"fingerprint":{"sha1":"00:F6:6B:07:1D:E5:90:55:C4:73:9D:85:7B:0A:3A:F5:95:B7:91:FC","sha256":"7C:50:75:A7:32:11:1E:FB:81:EF:47:FB:C7:30:22:DC:B6:C2:BA:00:B7:7D:FA:EF:0C:26:73:00:EE:D2:70:51"}}},"request":{"raw":"GET /.rt/challenge?tier=captcha\u0026return_to=%2F HTTP/1.1\r\nHost: nexacrypto.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexacrypto.pro/\r\nCookie: sil_ses=d53fec3829aa7325e0249a24100d480f; __Host-sil_ses=d53fec3829aa7325e0249a24100d480f; sil_gate=ASBkNTNmZWMzODI5YWE3MzI1ZTAyNDlhMjQxMDBkNDgwZgDi3p6nDZxZWqti-tGj.-DLivSqM_xNk76NnQkht3QTl--KCmoGPudApcUq3dhFxB4elwtY2FfSzA46WKl9zG9stYhnjqYJuibm9rgLpDw; __Host-sil_gate=ASBkNTNmZWMzODI5YWE3MzI1ZTAyNDlhMjQxMDBkNDgwZgDi3p6nDZxZWqti-tGj.-DLivSqM_xNk76NnQkht3QTl--KCmoGPudApcUq3dhFxB4elwtY2FfSzA46WKl9zG9stYhnjqYJuibm9rgLpDw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 636050\r\ncache-control: no-store, no-cache, must-revalidate\r\nset-cookie: sil_ses=d53fec3829aa7325e0249a24100d480f; Path=/; Domain=nexacrypto.pro; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=d53fec3829aa7325e0249a24100d480f; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASBkNTNmZWMzODI5YWE3MzI1ZTAyNDlhMjQxMDBkNDgwZgHk3p6nDZxZWqti-tGj.TVAe_FNPEyuKTyecRGvuCHC-43o0NCknqEFg3wpOJgt5r38DoMLNWk7stseKVq2fKScnzNgXAqXA9H5bFMR-DA; Path=/; Domain=nexacrypto.pro; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASBkNTNmZWMzODI5YWE3MzI1ZTAyNDlhMjQxMDBkNDgwZgHk3p6nDZxZWqti-tGj.TVAe_FNPEyuKTyecRGvuCHC-43o0NCknqEFg3wpOJgt5r38DoMLNWk7stseKVq2fKScnzNgXAqXA9H5bFMR-DA; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\nx-edge-action: captcha\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 06 Aug 2026 00:29:14 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2153295,"size_decoded":637046,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49175)","md5":"d2dc0a8a107c86764994fddf5b5ebece","sha1":"4cb28a77fcb3481460deed7b959977e8bdf97861","sha256":"a3f4d72b64555eccd386859cfe46dad2fa205623ab2144de9f6e18c0f3f2d691","sha512":"fd8f769eab03854ca7e545c9b0843e1bae0d5e2e94776660a4acac243567ed51986cc4cb18fdaa28dd455ea9d45a0081072cd2134ef3b59f9efc9cbf66d73fd9","ssdeep":"12288:bmZtYcYmo/Z+paGnN1LxLiGWVQUeE/ng6o7XbTF7gYUgg5C0NE6LL9Dt5R5hh/qq:J","tlshash":"6125ed923a91b5ae048787313a4a57f658bfc505c6ce9449f58c9eedf0dcea3298c3c1","first_seen":"2026-08-06T00:31:23.854996Z","last_seen":"2026-08-06T00:31:23.854996Z","times_seen":1,"resource_available":false,"data":null}},"time_used":971,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":419,"receive":552,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexacrypto.pro/.rt/ce","fqdn":"nexacrypto.pro","domain":"nexacrypto.pro","tld":"pro"},"ip":{"addr":"158.94.211.169","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexacrypto.pro/.rt/challenge?tier=captcha\u0026return_to=%2F","date":"2026-08-06T00:29:15.533Z","timestamp":1785976155533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexacrypto.pro","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 15:42:06 GMT","end":"Mon, 02 Nov 2026 15:42:05 GMT"},"fingerprint":{"sha1":"00:F6:6B:07:1D:E5:90:55:C4:73:9D:85:7B:0A:3A:F5:95:B7:91:FC","sha256":"7C:50:75:A7:32:11:1E:FB:81:EF:47:FB:C7:30:22:DC:B6:C2:BA:00:B7:7D:FA:EF:0C:26:73:00:EE:D2:70:51"}}},"request":{"raw":"POST /.rt/ce HTTP/1.1\r\nHost: nexacrypto.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://nexacrypto.pro/.rt/challenge?tier=captcha\u0026return_to=%2F\r\nContent-Length: 139\r\nOrigin: https://nexacrypto.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sil_ses=d53fec3829aa7325e0249a24100d480f; __Host-sil_ses=d53fec3829aa7325e0249a24100d480f; sil_gate=ASBkNTNmZWMzODI5YWE3MzI1ZTAyNDlhMjQxMDBkNDgwZgHk3p6nDZxZWqti-tGj.TVAe_FNPEyuKTyecRGvuCHC-43o0NCknqEFg3wpOJgt5r38DoMLNWk7stseKVq2fKScnzNgXAqXA9H5bFMR-DA; __Host-sil_gate=ASBkNTNmZWMzODI5YWE3MzI1ZTAyNDlhMjQxMDBkNDgwZgHk3p6nDZxZWqti-tGj.TVAe_FNPEyuKTyecRGvuCHC-43o0NCknqEFg3wpOJgt5r38DoMLNWk7stseKVq2fKScnzNgXAqXA9H5bFMR-DA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":139,"data":"{\"p\":\"init\",\"cid\":\"7b444c072e05cad4efdcb0724cd95e8226236f2c8a02b4e8829cd962b4ef20ee\",\"kind\":\"slide_puzzle\",\"subtle\":true,\"t\":1785976155531}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: application/json\r\nx-incident-id: euwest1::1785976155-llA0SX6EqinCip0Mo80ZkYNv6DRdnAuV\r\ndate: Thu, 06 Aug 2026 00:29:15 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":1271,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T06:01:13.311428Z","times_seen":17737942,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}