{"report_id":"9c606065-9f37-46e3-8a27-673a74f87c94","version":0,"status":"done","tags":[],"date":"2026-08-23T15:51:50Z","url":{"schema":"http","addr":"nexvero.top/","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"104.21.34.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexvero.top/","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"title":"QUANTUM AI TRADING","dom":{"size":76625,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (954)","md5":"a32e46b5d84b12a7b35b7e02b36642a5","sha1":"bad553ad9eaf0595f44e7627318b97e64be5e58d","sha256":"46fa565d4d836f09bcaca5e595eb45a86334fc532d7435cb333407c89e20db26","sha512":"b328e3e46b1af436eb117880f739d08d409bfedc03c96480bc08e884bd931e60ab532555e9f4751a5f4337cd6e183885eea48a54892d0e32d36495424ee50167","ssdeep":"384:7qqnKx0yvtTS6U6L6LTgfL4LwLwRAlrm9nEmYi:7qqnW0yv9SPIOMfMEdlryEmj","tlshash":"027362117a711c16a00ba2d4f2e2eea3aa02f713c64a45f4b5ec41f1bfc7db16963359","dom_hash":"domhashf4ad13ccb7071ddbea35e4b675b9f7d9","first_seen":"2026-08-23T15:19:50.006785Z","last_seen":"2026-08-23T19:53:38.211271Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexvero.top/","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"104.21.34.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T15:51:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexvero.top","ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-18","domain_rank":0,"first_seen":"2026-08-23T15:19:46.053635Z","last_seen":"2026-08-23T15:19:46.053635Z","alert_count":92,"request_count":23,"received_data":4510771,"sent_data":11431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-16T22:53:44.913224Z","alert_count":0,"request_count":1,"received_data":540,"sent_data":917,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-16T22:33:33.289447Z","alert_count":0,"request_count":2,"received_data":926791,"sent_data":966,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexvero.top/","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd7ea20f32f8350db60069bbf76c8f3f","sha1":"ddfc4801b498ade3cd3944f5da6ac755ec85d2a4","sha256":"382e12e963af57d384a66ef84ceeb66f93af49bbdc0c5862f8409922dc0fd72d","sha512":"c04e40779d13bf83e146a2f209a68daade63a5ce558cb14a3aa8c3d6a43298f4eb6b5a5475ecc1b0d3c8fc2be5a4f39d810bb0b76d4e75ae7ebbf3a16955421b","ssdeep":"","tlshash":"b6f0a39d3c96b05737f93579c323ca7f3355074075835524c646cc7478545861896d4d","size":443,"data":"","first_seen":"2026-08-23T15:19:50.072427Z","last_seen":"2026-08-23T19:53:38.242307Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"53e07aaf052748236cbf526a1510da19","sha1":"61100006049db6481f7922b3c3ac034f8ebdbfe8","sha256":"3e4ac9430210ad06136c36996936c5e503ffc8fab1e1d326490b93fd09f721c7","sha512":"d6886932f2758203c4f335301ccfdfc3fcda0b38f6e0ffbf71af42460ee18b6fa018a8ed81cb0c031f7e7dccde480cf7cbf457c8f39716a20a18a209115fae3f","ssdeep":"","tlshash":"53c0808d221e1cb146ff1701c77fa604b4053258e49559314c1d23059d20f13d744850","size":188,"data":"","first_seen":"2026-06-08T14:18:32.248415Z","last_seen":"2026-08-23T19:53:53.789762Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8052b2be5aa5bd77de45f4fd24a8712e","sha1":"d3c4a64908f2afda9f2d6c887c06390b34fb1e1c","sha256":"e2fc540011504f6ff3d104e3ce2f39d067b4d12377173e994bc14a8b329718c9","sha512":"f07c2b9ee8a939a36771112cced53f979a134e7c361c88cb3d92f520d612f88ea70703cfa354fdbb149a8d347a16d991b702c7bf5eb11bb9f2e209aad6d1a25e","ssdeep":"","tlshash":"c6e0c25bb1e308780ddb397b2b5ee744386242831c0d5c09be1c88a58ff8bce50bb684","size":382,"data":"","first_seen":"2026-06-08T14:18:32.249314Z","last_seen":"2026-08-23T19:53:53.790632Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04316b6ebce1f62b82351b5b6a46457d","sha1":"5f86ba3986d93f86b41f13a71605266a2196b547","sha256":"0595491720e35023311ed26200c1181a91ed8fc1533ab19f1c2571c4060551aa","sha512":"cf0d2b63054cb2075a312d586bcede7fdc599c0d2cca3dbe459d57dcd0c4188a5355a41dccbf2d2a05f5283e7055c313b19b8e43c1602fb016b8cf5bcf6e75c3","ssdeep":"","tlshash":"40e02b32e58404d1d6a75424cb4b3400b21582171452c900fa8c63811f25a6fb144fc9","size":301,"data":"","first_seen":"2026-08-23T15:19:50.080967Z","last_seen":"2026-08-23T19:53:38.244396Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11370901259","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"13cdc43d22f8e081be087825da22476a","sha1":"b03fb76739578e3fe5c0198bc73de7af6a98a1e7","sha256":"2c5293c01496a2e019999b0da1ff9a916d4c6c4585791695688da1587dd3d794","sha512":"32acf94217dbf91f076e46ad234efc39f69be472dd23675ac38070b21462765a3502d75ed07086eb79d599ef8a2d6fbd50f322bed40460cb7881270e7b59ebaa","ssdeep":"6144:whY9AY1iLit0N7SHtdZen0oBDf3M5gcXsL3EQB3PDqeGzW0cbHiNN:wHdLjNuO0ydXbmN","tlshash":"b19419cdb3d674529392b478503f018ba67e79e2b84cc899f189d8d42e7469a4233f7c","size":428627,"data":"","first_seen":"2026-08-23T15:19:50.035595Z","last_seen":"2026-08-23T19:53:53.765544Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6LER5P74K1\u0026cx=c\u0026gtm=4e68j0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49224bfb9ea4c6eb66669bae9db73e6b","sha1":"45a8c638440b59afdc87d2ef19e28f916f331067","sha256":"8f0956666d8e6cc317b9d79900bccca132f3f8ed0ed5ac262b12ee54b2801ff1","sha512":"3220391751f190ac943fc52a1a1871189cc0f01e5f6b8ef002a1a81080cde726dcffba2611191a33bfdb2fed551f76a7fee2407796221ba15434e7dd19a90734","ssdeep":"6144:jKHjn9AY1iLZKHg0D70HtdZen0okfha5gcXsL3EQB3PDqlbzW0cHHNN1FG:jOWdLZMvDwO0lokHPu","tlshash":"f0b4e7cdb3d674665396f078503f01cba57b28a2b45cc89af189cce42e74a9a4127f7c","size":496976,"data":"","first_seen":"2026-08-23T15:19:50.049705Z","last_seen":"2026-08-23T19:53:53.774176Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexvero.top/assets/all.min.css","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.297Z","timestamp":1787500281297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/all.min.css HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-7c7e9\"\r\nexpires: Mon, 24 Aug 2026 03:19:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76dHqMzBmGJr2TxfURpQrMfU3yqiyS4xxJwt4eeyAeqB988tKjdV33c7M3tq8hJlXhZ3SOplXwNo7uTerdewlHZQ4wwtA1vK%2Bu0rtyPdGNriBErTpWNv09%2FDLXFKFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473618788be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":509929,"size_decoded":103201,"mime_type":"text/css","magic":"ASCII text, with very long lines (52040)","md5":"cf5cb0683b4e6c4727ef8c6d1e23af77","sha1":"6f00ef8b7e2f0b6360fc56a7d301e4d2b70970cd","sha256":"29a7d44b525b7bf9e4ae813f1a36edaa65083c687d3bffa86f026a34ce59f21f","sha512":"e1fb6166da62fa5d3a1ea49e2f042b31f2d883fd69f18a72646654c36797a836dd8b6d4baa470e02ac7126600da9b3c494a0e5f650a47557edba215ae192ab9e","ssdeep":"3072:e2bQzfbumZd1FHU2vjVkYgcpfZCnFJcAdHNoB/Ryd0K68xRDxDQjd:BbQzTZZd1FHUCaeeJ7dHqB/RC6MMd","tlshash":"ebb4e9a0a05520dcb3d7e60f5b02b629e4b3f33ed9814f5fe1d5484e0dd3a6871867aa","first_seen":"2026-05-31T06:41:41.772737Z","last_seen":"2026-08-23T19:53:53.787219Z","times_seen":16,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/v4-shims.min.css","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.298Z","timestamp":1787500281298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/v4-shims.min.css HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-6b1f\"\r\nexpires: Mon, 24 Aug 2026 03:19:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQgpLqbSdq66jeVLHYouy%2Ftqy9X%2BkTTJZGHGl28fdfUW%2F6cqUMsVFjjYRtT57h50bfSgkUDzmmVQMfE1ceN9nl3d65jkKJLgUM%2F7pbbDpOVyZYb6gxYymMCT%2BhsowQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473618798be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27423,"size_decoded":5121,"mime_type":"text/css","magic":"ASCII text, with very long lines (27247)","md5":"a20fc4bb11eef49c60be43baecfcb9e7","sha1":"c2bb4af4a915c00be8c03f8845ee73a39f40f219","sha256":"0566cefe40eb9f45155255d2bea7b2db6b221b2bb2d5728439bcb84ce272c29f","sha512":"ab623f03d5c687440554fcf4554a40afddf45c1df7dead4716c26a46f10eaa2b788a14abb2f2838c7583ce46b15468c1a216af6b54e25e798c518055fd9f727b","ssdeep":"192:cPxxxbl74K9YUpfPHH5PNjbp8S1cZQRG1B8tzmePAMRMJV68NzQAmnRt:ad74K9YIZPNjR1FRG1WPAMUNNzQAmnRt","tlshash":"32c22565931da0d3b3ace847bb0172a82776b75999825c50f30b7c4c9dc3a1776e8f28","first_seen":"2023-08-04T21:16:32Z","last_seen":"2026-08-23T19:53:53.770872Z","times_seen":76,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/tx(55).png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.545Z","timestamp":1787500281545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/tx(55).png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-3bc3\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1927\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SnYfCbZtVQBFbyOCUFJowf3PRXUmegqKEp5%2B%2BMarCkjt4bhDWXJuhb%2BjqORBrp7rOKU7%2B5KCW5CT2iVsKBwFGahZCBpi19%2Bs0DfxYR05iBsPsE%2BkAg5mAfzZruLpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb4737a8b48be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15299,"size_decoded":16121,"mime_type":"image/png","magic":"PNG image data, 500 x 166, 8-bit colormap, non-interlaced","md5":"c23716fb3234b59bbe5af180b74d6979","sha1":"ef010015e929122b0ed0098a8bcae8914e29f1a7","sha256":"78c7a6c39e36b5ad5325fcc2a431a436095ee0b1ec0aa42adc24e9166b428cb8","sha512":"4150642e8f16ce1665abb4074f9a0ec38a43acab45a079185fa37255fa28b515f4f5690cb8ba6644da8dddce4b55c526f2e45a8575709d8f05a9f0fa30be78b7","ssdeep":"384:Yzx7C1QQfApjVkjZXVyal5JTqJG28xL+n7jA9Zd:Y1C1zYNVklJbTqE2V/+Zd","tlshash":"b262b0d5889590ee6f5d997d9850214a629093fcccc2db40ceb4ef8377a167b3028e7c","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.764299Z","times_seen":26,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/fonts/fa-solid-900.woff2","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.693Z","timestamp":1787500281693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/assets/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\netag: \"69404d8c-37\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1927\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdJ6fXTB7GRBjbYzy7Wj5JAoTZcupmt61k22Voo7hHRLMxbPTzr7RPMjEUF0fhvxHj97gNFMl8Gvlx7oIzQ547IAuOPX7w36RmQAMrcHB9RVkOiBdcTF06rnX8NUjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2fb473888d68be6-OSL\r\ncontent-length: 55\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":790,"mime_type":"font/woff2","magic":"ASCII text, with no line terminators","md5":"0c60aed391de4a8186e51ee3025203d9","sha1":"73ad40368f81ce8ff822802fe8a5d0a5b5a6db0f","sha256":"0758055afa0b3cb8e75b13b667334db429e7bb86697e046fe6fc13517917ea6f","sha512":"ba8154f17b7f39e4dfc882fd32ab2287b3165b9fc5ee7705f0e648c7d47c5abf01475930ee2ca3b9c1374404a7a300584b8058641a40836c62e3f0dd5d71a513","ssdeep":"","tlshash":"279002ba96532610478541b51056f408d4462935345819219046846d44e4670093514d","first_seen":"2026-05-31T06:41:41.782169Z","last_seen":"2026-08-23T19:53:53.78667Z","times_seen":10,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/youtube-x-logo--w--min.png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.533Z","timestamp":1787500281533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/youtube-x-logo--w--min.png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-1cb8\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHQlUjS5%2B8rgIGJwWa4t4fO969WkXEWKaWMQT%2BM1G6sVVo4bwoXZWSSKf93WhzeL0mCe1Vo2YsWZEqdBdEhu2BVw1nN1yIp7u56%2B66RFeTbma%2BpzaKGDYyTTNbh6tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473798a98be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7352,"size_decoded":8052,"mime_type":"image/png","magic":"PNG image data, 700 x 167, 8-bit/color RGBA, non-interlaced","md5":"50ab17af5932df69db7f597d8325085a","sha1":"d7e2bdd375344d42478c80641c7f9b6fe754260d","sha256":"f50e6200be19ae86aa938f3a41b3a571b0119d0e974b90bdf764889d08104341","sha512":"2b57b2523769e2349a7d1c4e1e1a4df80148660978e8cb757c8ab6623694734b1fe0b1137378672b17333af304f65add3e7b1753648e6d8e7e600b00981b262a","ssdeep":"192:MAWnKE8rFfJ+Fjhyo/2aitC6MFocfroGBZ2/2FV1Q1:MAwKE8XajXkUlFhBw/2rk","tlshash":"e9e18f04ea048e44fedfd9ea464657641b5bf821248092522650b8e4f3f9612d7ce7d9","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.776181Z","times_seen":23,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=4\u0026frm=0\u0026apvc=1\u0026auid=230618723.1787500282\u0026dt=QUANTUM%20AI%20TRADING\u0026tid=AW-11370901259\u0026en=page_view\u0026dl=https%3A%2F%2Fnexvero.top%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1710646129.1787500282\u0026navt=n\u0026npa=1\u0026gtm=45be68j0v9235904545za200zd9235904545xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~120213116~120315471~120385423\u0026tft=1787500281860\u0026tfd=1589\u0026tids=AW-11370901259\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.864Z","timestamp":1787500281864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:14 GMT","end":"Wed, 28 Oct 2026 20:42:13 GMT"},"fingerprint":{"sha1":"9E:E4:0B:D8:22:18:95:CA:F3:60:D0:A9:F5:51:6A:A9:AA:64:B5:C2","sha256":"04:A2:FD:09:AF:5F:A4:87:31:AC:C8:12:2A:13:F3:C5:AD:27:8F:5B:96:8F:50:1C:BA:45:10:A3:9D:C8:20:42"}}},"request":{"raw":"POST /ccm/collect?rcb=4\u0026frm=0\u0026apvc=1\u0026auid=230618723.1787500282\u0026dt=QUANTUM%20AI%20TRADING\u0026tid=AW-11370901259\u0026en=page_view\u0026dl=https%3A%2F%2Fnexvero.top%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1710646129.1787500282\u0026navt=n\u0026npa=1\u0026gtm=45be68j0v9235904545za200zd9235904545xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118897920~118897930~119367802~119367810~120213116~120315471~120385423\u0026tft=1787500281860\u0026tfd=1589\u0026tids=AW-11370901259\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexvero.top/\r\nOrigin: https://nexvero.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ndate: Sun, 23 Aug 2026 15:51:22 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://nexvero.top\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":540,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T20:40:39.331699Z","times_seen":18061082,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":3,"connect":25,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/b3-s.jpg","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.537Z","timestamp":1787500281537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/b3-s.jpg HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-575d\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeqS6lNSpbqO11qvNER43iLdJrF9QkFYh5m3i1QbxzrDditn4IAyzgPZC%2Bz9QyUhOF7uaNXGEjesTrcGokUcYS0vBsJSLw30cEPx%2FZBapOXVA39agfFegnuRIgQing%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473798ad8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":23022,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 498x300, components 3","md5":"45ecb4c146eb4c197788e31775476108","sha1":"67dbd0c31b62567029d5e9bf048213b4d99c990a","sha256":"326579aac874d43f38719c4eeb35ebc7041b849abc7c6f49557065387d14b539","sha512":"f97d88f00f54eaa0437e788cc0302e25a2308b118c8b8b76510b92ad98faeb2ebfae7f5f7939dc2dd8514a85f7948e54fa0b3f2b66b804e7daf476fce0641bd4","ssdeep":"384:nrugcGQ6fa1zfYtSBQmcM7b++9e4dvsfrR78naXu:CAQxQhM7S+0f18nae","tlshash":"59a2cf61666348ee48380a23c1cdf31972624e3c0eb7b656a0457e4d7b04a68bbe747d","first_seen":"2025-01-17T11:59:02.496661Z","last_seen":"2026-08-23T19:53:38.230043Z","times_seen":16,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/lander.css","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.295Z","timestamp":1787500281295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/lander.css HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-1f5f\"\r\nexpires: Mon, 24 Aug 2026 03:19:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2BLRNeHchkqJgojbe5DHDjngNQ5ohMQbp%2BCdyHeFxyv9Dr2I72WmmAY9eBFYfR9qziA2L%2FXPNqOoJMGfV6u81ELjad7DMqbvcZ8%2BeKKwPgjzk8xGf3z9hhoUcvOHZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473618778be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8031,"size_decoded":3158,"mime_type":"text/css","magic":"ASCII text, with very long lines (4694)","md5":"cd90000dc184bcfcea9b81591ad80ffd","sha1":"3a2ecf8fdb6a9ea8551ae30a66b166bd8fd7129a","sha256":"8f9b12f5dd44c8d4169851f070611c5a51b28fef8bef50cf531c756d34ce9dd2","sha512":"5c11ebb2a1b791bb0c2586719e22cea5a53a4fecbc5be2321b7cf76fd5b04f19d33f7a00ab3ac4394ba52edb168a944b4178d0e9350618e8bb27d87d0540e4b1","ssdeep":"96:cG0wddAUcSpUcOTzVMFZzUhY6+kv2V19UcjpW8oNJUOWo0OtOv4/cNn8jNHY73d7:wc3AZgQ+DrxpsXUOv0OtOv/NwY73d2yN","tlshash":"eef1f0a2bf92246db01b881ee183b7bd6e29591393130debf9117a75dbc64e70170a09","first_seen":"2026-05-31T06:41:41.762845Z","last_seen":"2026-08-23T19:53:53.782207Z","times_seen":16,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/fancybox.css","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.511Z","timestamp":1787500281511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/fancybox.css HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-5e0e\"\r\nexpires: Mon, 24 Aug 2026 03:19:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJteBOLb03ehXAx8LlKys00iKE1N%2BWMo1zpACdeGEEO9qTMTb0Ah296KosZaQjyEXiNbCLlGF8yPw25iAJ1kEwglQZ7x2U0uBwuoz6cG8lf46YESIEathHAyBOPLLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473768a18be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24078,"size_decoded":5818,"mime_type":"text/css","magic":"ASCII text, with very long lines (24078), with no line terminators","md5":"d74f2bf0b0f416a96ff3cd78bb73d8af","sha1":"7c7cff35566e4ee9f37f4b91e8dfbe6de19f16b8","sha256":"23145dfecf89c5cecea4352cd9e8d8ebac53cec164b5ec73c48f66baa3bbe082","sha512":"f433113d29b8509f1512eea37b86e9a501eedbdd46ba136dad0215044b3295112f9fb2fa6462f103a90fe40580f9d28ad929ae52163a7a0e6cfd78b1d355f1d2","ssdeep":"384:CM1VMcoRIgQEd4HlSKfGYkNbPv1NFCVqVz33q06m8NDr:CRIgQEsgvAVqV56mkr","tlshash":"31b295d709443c3d4a234b44938a884da339eac3ea2567fb215da99683c53d431ff6ce","first_seen":"2023-05-06T10:55:56Z","last_seen":"2026-08-23T19:53:53.775402Z","times_seen":335,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/b1-s.jpg","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.534Z","timestamp":1787500281534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/b1-s.jpg HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-adb7\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PAuuk8l8yWftiQpfXdof24YXlCCxkouhoK2yuodeHLVSNogqFRGi5J%2FgRXc4bpvIruSUEu3wKZnFJJOghNBvsJn9hQPvgoj%2Fg4qtO7SaYuJIG%2FUjz7t3zSpIK5hKGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473798aa8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44471,"size_decoded":31865,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=449, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=750], progressive, precision 8, 498x300, components 3","md5":"7085959191bc771b86cc0c3eb74e982c","sha1":"415c771a76a167b1e860dd229442195c5e10bd5e","sha256":"1769c08a71616bb576aee9b1cd447bb33f65c4838205d15c364c072e0486f6b4","sha512":"0cb0201070a539ac08ac6b9b92d84b4ac087abf6666a17e305b61daafb07b1ec00951552494203616d64f735ae818db1b435e2aad1a3f6a37d6a7bc469911ef7","ssdeep":"768:YYy6ccbC07PHYy6ccbC0Lzl1Gx7Pxy+Se24rR7G95/7:YMbdzMbdLzlEHy+Sembz","tlshash":"2413cf35ef68ae07fdf15b3464a4c382a350b62857e33b82745ca80537b66d0de9c683","first_seen":"2026-05-31T06:41:41.767836Z","last_seen":"2026-08-23T19:53:38.238385Z","times_seen":14,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/b2-s.jpg","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.536Z","timestamp":1787500281536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/b2-s.jpg HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-9f24\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZwxwClAbWfjxwB2UYkiPJ2AAmDco1WzBLaRQlt3i%2BP8CYUcGhMjdAgo9qAJFvYRwqQwAlq%2Fk3TsJGd1Kn1p7i4MASywrflWnu1pLlqcYQylMNSJFwQQU9YogieTfJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473798ab8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40740,"size_decoded":40998,"mime_type":"image/jpeg","magic":"PNG image data, 498 x 300, 8-bit/color RGBA, non-interlaced","md5":"2d8b9183b3dfd73715cc89196ec3dcf0","sha1":"a1a5a9cfc84e9b3d0f77491274901200a82d4f10","sha256":"826c1e3a4931eb46ea779afba387ce6a4a7f0a135b95e22d83c8a931f295b14b","sha512":"b9078b2d58bff27021fcfd5ad1dbae5a1b7c03b7767d076ea4927d4c23b01b2441155ede965d9c897d2dde51cade84322a67ab98e9910953fe111bd65421100f","ssdeep":"768:831+HiODxv5TngvBWZBeOH1+CPBcA149R5wP6L1bku5jy:X1hTYWZoe+CPOAsRFy","tlshash":"0e03f1b2b3f7adb6ad4df9c2ee08cc912d341960876836dc8bc2f5255919d503129f8b","first_seen":"2025-01-17T11:59:02.495534Z","last_seen":"2026-08-23T19:53:38.222045Z","times_seen":16,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/tx(44).png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.544Z","timestamp":1787500281544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/tx(44).png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-4346\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vA69Vs60aot3r3Knr2dtpR1Kw0PYF1cajxBpNmwRsuPlCcbbJQecrFBh5Ve%2BGnq0W5USOECp7DbMZHwQyHpufakBwvqwlaSfdRVrar6EbiAqleDFW9%2BtxtlJJGN9Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb4737a8b38be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17222,"size_decoded":18036,"mime_type":"image/png","magic":"PNG image data, 500 x 166, 8-bit colormap, non-interlaced","md5":"f728af6bfa079b95bc99f70d35361da6","sha1":"825e402c955efbc79a278630f0033d34fe7e46af","sha256":"382c8656daad108d6f23095c8cf55f9f114f7cefc4c206a22702231c7af917d4","sha512":"52aa38e4869fc77ca89872306f5eb54fe5c4ef8a7b52f1db5307da8fd0da93ed9986c4b4c0dc1eed2c048c85845ca44db3c8e6da1c32435ce5c9bc6f3a233128","ssdeep":"384:/KN1sT6RAcYEkoPfRWf6yFrXNAi+lFFet1BFR1dHYc:/KN6c0eWf6yzAi+lbeNj1N","tlshash":"fb72c023e520acc8d9e8ace727567088773d462a0149aecddc53d4ea6c83f22d5a5e85","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.782799Z","times_seen":26,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/favicon.ico","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.821Z","timestamp":1787500281821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 20 Aug 2026 06:11:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AddcFwFWn6WEEyYNfGAb8UetS4lHXD8NmTAxmrn%2FiR5z0y4Yp%2B0qSs%2BkeHXoh9RLKbtw28O6erX%2BU3GodgI4sTrpQP%2B4TZUMf6tGmTSAHW5RHiYMjK%2BzcJw1RItTHA%3D%3D\"}]}\r\nage: 1927\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a869a8a-224\"\r\ncf-ray: a2fb473958e78be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":886,"mime_type":"image/x-icon","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-08-23T19:53:53.770229Z","times_seen":20982,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/tx(11).png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.541Z","timestamp":1787500281541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/tx(11).png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-3604\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5r8YnxGm777z2bzeMTnn90VZH38GtQH4zCD3l5bueLQVt6ocOTz9Z5Yqy%2Bd0lbox7umv6R%2Bty0sNfUAIogilMmnp48poqsGn6%2FBvJR8lcwJbc1GyyAL2Tal02Ll7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473798af8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13828,"size_decoded":14644,"mime_type":"image/png","magic":"PNG image data, 500 x 166, 8-bit colormap, non-interlaced","md5":"06b26393d0c3949b6672afd1fe8eee36","sha1":"25dcfc606599dd60f38fb1310573f1f569ad9b05","sha256":"65d6256f6328c1b00cc2b38f4385d82aab35bdcc99ad49ada8e0a80f67a4a82a","sha512":"20ca759b5a7c48339ec75c59be7b1395d537243c0ae6bc469acef254eedb627d4b7cb59d335e9ae4f0ad3e74d836e9272f300cdb3c38def15138ed053b92e8a9","ssdeep":"192:soJhrhbxJQbMI/AgUy0uYt1vZxHVqtrkv1AdUQtvuEuIRXQW1sH5jISudI:fJhrZON/AJt1BxHVBv14vbuIRXF1Gtu6","tlshash":"3852d06adafc1db872cb592d3adf4041d7b28e30529a63860073f91ed5835325cf80d6","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.787779Z","times_seen":26,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/tx(88).png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.549Z","timestamp":1787500281549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/tx(88).png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-3ef1\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtHnnjTpKRGj%2FaQf0QOd99%2FCYmf3UiiRp7aOAMCBjGZJFmrgAvZ8RJr2Xgm0%2B%2F0adaFhwGUwkdYRksbE3tVDYZq1obmc5btarw5Lp4s0Jb6O07qIPwQwIDkk6CysAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb4737a8b88be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16113,"size_decoded":16931,"mime_type":"image/png","magic":"PNG image data, 500 x 166, 8-bit colormap, non-interlaced","md5":"224bf636ec890620da2caa5fef7fc48a","sha1":"08671f802cdc53008165610a3d6f4411ff2a2d26","sha256":"724138fbfedb05f9595795a6a11d868b11d152aabe7d672c7901cee5de297c3c","sha512":"5562ed7d7befe52f6384b967e936667afb6c3b18a32a90e259479383c11890cbf41a48a2837818761e57c61c82313a0a553aff65e96de52a12e2aa7844480d27","ssdeep":"384:c5LlLpmeIXzgD/7rX4CyqBW9WuPYIC93bVeyeABrE4lH/pgArrQW:c7LpKz0rl/BW9Wf9LQyeErEG/Fr1","tlshash":"a872c05360dba5eaa129d63775bd322a4ca4fde3c31302b946747b0b41cef01afe5522","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.764915Z","times_seen":26,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/aa.mp4","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.696Z","timestamp":1787500281696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/aa.mp4 HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 02 May 2026 15:17:49 GMT\r\netag: \"69f6159d-366849\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1927\r\ncontent-range: bytes 0-3565640/3565641\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DumYxbfVvvImyruBUnuZELh6httWVLimF3nYugkFVPCwZf1f6UL10AmAMmetpzyoKvXP%2Fz32Cmg%2Bk2aLkDYbn5wsCtGN%2FsECIGTIO1RFe%2BNiLgLFGCNgJjyCDFU13w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a2fb473898d78be6-OSL\r\ncontent-length: 3565641\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3565641,"size_decoded":3566410,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"89e9958fa9dd9eadfc71a16521cf9f48","sha1":"c59c47e089767992d6d8b31eb692abb167ea42a9","sha256":"bcd760f1fbea556029650dd38b69de0ee433126cfd0e27d4d3a5ed1a3cb624f7","sha512":"d13b66e96d0810a18872de05ca8a512c176e307dd0f97b8c19ac68cfd091f3907d092bfd7f7e6574e69c50a0ed3a7d61df03852a9f9ac23f807cfcd70e7cca76","ssdeep":"24576:MQI/ZNX/wUg15MzXlYYFF8JKI5fqQgpkTiJT/G0b8DKEviV4j53:pwLXTg15ejhIdqPkW1u0g3M4jp","tlshash":"5d25238a378b501fc76383b8a5ab4f7073e1ed94862a4607094737554de62dc8e1bafc","first_seen":"2026-06-08T23:06:48.463493Z","last_seen":"2026-08-23T19:53:53.768234Z","times_seen":5,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-11370901259","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.513Z","timestamp":1787500281513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=AW-11370901259 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\nexpires: Sun, 23 Aug 2026 15:51:21 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150492\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428627,"size_decoded":151096,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5182)","md5":"13cdc43d22f8e081be087825da22476a","sha1":"b03fb76739578e3fe5c0198bc73de7af6a98a1e7","sha256":"2c5293c01496a2e019999b0da1ff9a916d4c6c4585791695688da1587dd3d794","sha512":"32acf94217dbf91f076e46ad234efc39f69be472dd23675ac38070b21462765a3502d75ed07086eb79d599ef8a2d6fbd50f322bed40460cb7881270e7b59ebaa","ssdeep":"6144:whY9AY1iLit0N7SHtdZen0oBDf3M5gcXsL3EQB3PDqeGzW0cbHiNN:wHdLjNuO0ydXbmN","tlshash":"b19419cdb3d674529392b478503f018ba67e79e2b84cc899f189d8d42e7469a4233f7c","first_seen":"2026-08-23T15:19:50.035595Z","last_seen":"2026-08-23T19:53:53.765544Z","times_seen":6,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":43,"receive":46,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/tx(33).png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.543Z","timestamp":1787500281543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/tx(33).png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-3b9e\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fk3pscEG2KdHngt6BHm38imM1WU0Itmi805l1Es%2BOB0FYYwM7iEhzO9Hkff24DynuXfflojlnUr5QsxSO5tAzSuBJkzl9LryjDOZ6rR5u6cEHPqAuYzjmeU4syZ37w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473798b18be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15262,"size_decoded":16074,"mime_type":"image/png","magic":"PNG image data, 500 x 166, 8-bit colormap, non-interlaced","md5":"2cda72ed07877c9668b90b1463471f6b","sha1":"c4b69a9235cadf462216c943224818b7103dd2da","sha256":"adce5289141be6af89331faa13faf547aeac4e9c0d24353c2db3139e140f8188","sha512":"c398a1723653b192688a27aa05220329311d847e96d9bc6f4f5e5914063f8eed513ac0d4c89e76ba714300d04df6013016877bd1991891be817f5dfe42c9c029","ssdeep":"384:i4kEmVN22wfWIkD2nmkrDV540k/JrHdPDSmozdea6RNstdnk:TpmVNkWIy2nmkPTqRr9bPozdeXXT","tlshash":"2062e1a09927460783d3db608a97f64fdca95fbc081be4e9e2259fc151be31336b0127","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.772822Z","times_seen":26,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/tx(77).png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.548Z","timestamp":1787500281548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/tx(77).png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-452f\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2pryvMphLhEPvN4mzMUnr%2FeVvve0y5BX80hzoqcDPqEpfxge48ahRt3Rs%2FoU9TR1%2FzZ1wOHvcWle6bKsxQklbiBbqXAfQBrzH%2B%2F3HO6tOJDy4QYhmRl4RNSehF5Yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb4737a8b78be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17711,"size_decoded":18531,"mime_type":"image/png","magic":"PNG image data, 500 x 166, 8-bit colormap, non-interlaced","md5":"ee489bff0e22b13fa5a96f1d4fab7c19","sha1":"aa8e9bbb3aedfba5b603129c9c150a6cbb6afdfc","sha256":"d43f408ab0835e0382fbd7ae8f315e16de778df72547de72c425c5807b750918","sha512":"d78ae73656e1457633a2b40774ade2ecf5e5749e33fff7ef48d8cd71fd5f5a55c8bd3a80e2c8a3135afa3243e7caa3449a757a15f41346db9260c3dff71ac88c","ssdeep":"384:m74ZAje+OwXGjEbtRyTd4P6X+kQnT4Neeqqi9K1Zv0XYzfpt+PP:m74eWJuk6T4NefM1ZcoDw","tlshash":"7f82e172c9f8ae8052b563046d94c4ff46d624347ed219e14eabd63009fc7face99382","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.785654Z","times_seen":26,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/sgs2b_bcmlogo.png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.550Z","timestamp":1787500281550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/sgs2b_bcmlogo.png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-237e\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=416aLsU3AxFYo6pgxIXZGBPuRZ7QpoGDyM9I7EmbbSRzAfq1vAmfOXELr5s1llavfMv1VoyqGUS6SywgWKa%2F3Hhy9%2BiiGWirbAq9e2a0CQArL2VoeB%2FfQXD4szNDpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb4737a8b98be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9086,"size_decoded":9791,"mime_type":"image/png","magic":"PNG image data, 500 x 107, 8-bit colormap, non-interlaced","md5":"988356fda3c9e6662dc77ddf056f97ad","sha1":"bd4a82a9e9dd3f0f6e618f7321e581f1ead16708","sha256":"e7cf6737a9397bf9b28f72c8addcc3eb095c724092e87c0b233228f1e6cee7bb","sha512":"22fa19528619390574079fa960b88c9187b1a26118db0ca9ffec7fea1352612ac932be353ee66a34344c3d5bf038dfc2e1ea8660ce76a1b43db522b9bbe82b53","ssdeep":"192:bLMbTjOfK0iDI4sibolm2zpt4fLD4H7ToGafyfse+dYw9PHJAB8u5C55zz27mprc:vMqf+NsiIm2zpt4ob4pv9hy8u5Cm7mtc","tlshash":"7412af901f58b005dec3bcbf2863133f96631977eaf41a5d4138d899761ce4dea11e14","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.767637Z","times_seen":25,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/fonts/fa-solid-900.ttf","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.763Z","timestamp":1787500281763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /fonts/fa-solid-900.ttf HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/assets/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\netag: \"69404d8c-35\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 1927\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ss%2BVyWFbszUBIi58tkDOGmEtsWBCGaicS1PXxAwrDFSWeRvPYtb7WhFw%2Fqd26erafK8nP6d46PH4wkYxhj45U%2B1JNA4bG%2BGlc5UwA1FPAGop6XTp0H9HIEA51QovQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2fb473908dd8be6-OSL\r\ncontent-length: 53\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53,"size_decoded":810,"mime_type":"application/octet-stream","magic":"ASCII text, with no line terminators","md5":"e0b0174a4c639ef0bae4bde88e581d26","sha1":"82aa754d0e346e704b506b3a3d8c5ed30434527e","sha256":"4dcd9a078a46833aab8b947bc31a9d502ced9eb363346dc860c72e4f43170dce","sha512":"698a1d13890aaaf90e6655a4b13a97a21033bcadb48ec91e96923af90ee7090ea3468ffa6ec3b77a78d36d905f2bffcfecd48fd5c9ef963812a614e3185d8656","ssdeep":"","tlshash":"239002ba86521610474441b91056f40cd4466825346459259041846d40d4660053514d","first_seen":"2026-05-31T06:41:41.784049Z","last_seen":"2026-08-23T19:53:53.778464Z","times_seen":10,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T15:51:20.302Z","timestamp":1787500280302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Aug 2026 06:11:34 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eSJ%2BFEknbrudJjZFRCnM5b%2BQV7Xm1erQ1bD7tIid8YetY2HNpYltFmHOPROHUBZqRPPi8ndqGIHjHPi2gX5T4FCZUTBpF5cvvvaErMqmftjr7IAzfNS8M4whH4pUtQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2fb473038fbb4fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":92553,"size_decoded":10901,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (901)","md5":"671af2ba42766f153e9e3b201eefa455","sha1":"c7c25fced53321eb3222b1f3e5fd44b1b7904a76","sha256":"c8ffab3f9ceb4ecd38b2449301ce83c0c9181e7d1e21575c0b5acdf61cd7effa","sha512":"660cffcc6e4c8b876ad5dd4eaee2e6ba120c22db96ebd6bc2cac44c8294e41354767ac2a1b24c8d55fc10692c4026edf473a6253fd02fddff65587b1d78b4154","ssdeep":"384:dRiTunUm/bNMR+R1tDbcHLGLuLG9qfnP4FFEzMM:dRiT0Um/pMov9AHaCdfPgSzv","tlshash":"ee9363117b711c96600f92d4f6e2dea36602f613ca4a45b8b9ed41f1bfc3eb0a553329","first_seen":"2026-08-23T15:19:50.052211Z","last_seen":"2026-08-23T19:53:38.228528Z","times_seen":4,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":30,"connect":1,"send":0,"wait":730,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/tx(66).png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.546Z","timestamp":1787500281546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/tx(66).png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-3ff1\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jZNFHNEhsIoDe6V4%2BLxDHnvhTN7etV%2FEn75dV8NlsxyN571B%2BIhPuBH5h2HvrG0%2B5lhOa5rTvI2SxbzXwv9RdlFV%2FdrXyC%2F60Aveuu2tcTlU5ffIuLbvWc5Y%2BKrY5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb4737a8b58be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16369,"size_decoded":17188,"mime_type":"image/png","magic":"PNG image data, 500 x 166, 8-bit colormap, non-interlaced","md5":"480f306a9e6b9fb2ef2bb1cf09cafc98","sha1":"aaec94bf16ba5bf98f256f45f5019defbeee4ab7","sha256":"88e20cb76646145f87ab920076fb83afecf6425303f0a3fc970786c64d4388d9","sha512":"4ae8582d472985c15e1e6b22817250ff360f91f30d9a609d328a364780e9502e1372fc103ae56713a338c71852ff0ccdb381bb895f07398e9a54762e9de00483","ssdeep":"384:gHnxQd4lZvDTjdaFyu1gxTvfdcZtkdIfY8mRG1dGj1Gk5XNeiob:gHx5vDTjdQYTvOy2EG1IZZ8","tlshash":"ea72d0040776d504d94d7eea83e8a6d2bd173022fbd030e9a7698d4d0830f983b57fa5","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.779807Z","times_seen":26,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/logoooo-1-min.png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.539Z","timestamp":1787500281539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/logoooo-1-min.png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-24e8\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8Yfynx3QggUAEzU5FR3NEcCJymA4fX4EnsrWIScCqVMrvONqkug760DTG%2F22Bw0BImOHuEzwXNvIc1I%2BI2iglWOugulrJ5480tobMSthC0SyV2Zs0PbMaoV9L8PsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473798ae8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9448,"size_decoded":10235,"mime_type":"image/png","magic":"PNG image data, 1900 x 119, 4-bit colormap, non-interlaced","md5":"a6b024cad66f8103f8df78a424e651ae","sha1":"f6ad796ca8da0ae8d97409be7e0e3ab9cab3ec05","sha256":"5576e55d5c3ba252c4b9fe5abf231bfca774fe41f35fe6afbc6cb731eeb9df00","sha512":"efb24c2e37e9200c39ba8eb2f0318f8477b9b363c47f7089a284708ca8105c0f5b5e5481ce4d32ea2ca38682e6cd182f3045b7e9948ad0e97b231e2a99d05453","ssdeep":"192:4o7msmTDu0YLUkuHB60NQlW9bCGxNjtvS3Xf2wV:lnmTOLYB9qo9bCeZ9wV","tlshash":"0212c0f52b5a883e8237e7c7b7be2e6e32146cdc53299b48164530c2162d8cf4331a13","first_seen":"2025-01-17T11:59:02.500769Z","last_seen":"2026-08-23T19:53:38.214383Z","times_seen":17,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6LER5P74K1\u0026cx=c\u0026gtm=4e68j0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.863Z","timestamp":1787500281863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=G-6LER5P74K1\u0026cx=c\u0026gtm=4e68j0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\nexpires: Sun, 23 Aug 2026 15:51:21 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 169407\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496976,"size_decoded":169991,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"49224bfb9ea4c6eb66669bae9db73e6b","sha1":"45a8c638440b59afdc87d2ef19e28f916f331067","sha256":"8f0956666d8e6cc317b9d79900bccca132f3f8ed0ed5ac262b12ee54b2801ff1","sha512":"3220391751f190ac943fc52a1a1871189cc0f01e5f6b8ef002a1a81080cde726dcffba2611191a33bfdb2fed551f76a7fee2407796221ba15434e7dd19a90734","ssdeep":"6144:jKHjn9AY1iLZKHg0D70HtdZen0okfha5gcXsL3EQB3PDqlbzW0cHHNN1FG:jOWdLZMvDwO0lokHPu","tlshash":"f0b4e7cdb3d674665396f078503f01cba57b28a2b45cc89af189cce42e74a9a4127f7c","first_seen":"2026-08-23T15:19:50.049705Z","last_seen":"2026-08-23T19:53:53.774176Z","times_seen":6,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexvero.top/assets/tx(22).png","fqdn":"nexvero.top","domain":"nexvero.top","tld":"top"},"ip":{"addr":"172.67.163.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexvero.top/","date":"2026-08-23T15:51:21.542Z","timestamp":1787500281542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexvero.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Aug 2026 13:00:33 GMT","end":"Mon, 16 Nov 2026 13:59:21 GMT"},"fingerprint":{"sha1":"E3:FC:5E:F4:7A:23:E1:DD:7B:72:CB:FD:CC:9F:C9:B1:25:53:62:1B","sha256":"BF:A3:E9:64:F3:75:6B:A7:FB:E8:BF:CD:BD:14:9C:D1:D9:63:BD:F7:84:93:F2:7A:4E:B5:9C:28:D3:26:F0:D0"}}},"request":{"raw":"GET /assets/tx(22).png HTTP/1.1\r\nHost: nexvero.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexvero.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 15:51:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 15 Dec 2025 18:03:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69404d8c-4b7f\"\r\nexpires: Tue, 22 Sep 2026 15:19:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1928\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IlD%2F5%2FQZicpmoveqC9IbHb45aPzLvtmz8%2F0Vw%2Bq97L%2BZrg%2FwLUOYUqN1LDo9I9KABi%2BlKQH984U7CI%2Bf3waLtkv6kW90Qv0VdZwnJmx6jb%2BPQXJWTMLzXkzuod6rOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2fb473798b08be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19327,"size_decoded":20155,"mime_type":"image/png","magic":"PNG image data, 500 x 166, 8-bit colormap, non-interlaced","md5":"aafac7cb3f53af27e57549e56e2b628e","sha1":"839de55119b73f909f234f4bdf7e3985171251c9","sha256":"76a14c5d42185326d013128532351530afd2a28211531dff2f4357fa65a65477","sha512":"3487e9725ce17af953bb38e98b5d4ba0a450f5b8f09da9445b71eda94822cd6e351e5b320c542f4c0196e25d0c1017e0a4c9786860affa3cbef4a125a0dbf3b9","ssdeep":"384:YcI4pwBXyeT3BkLPyfHzaHLyX+JNmToqa3Gyfm3VznqBhCGCfwr:YipwBXBBIyLu2CgoZFe3VzYAI","tlshash":"8992c0c3a5e170dd983a07e540480786dcc6714cbb29e567a67bfe40ac4ac617ffaa07","first_seen":"2023-09-23T05:15:31Z","last_seen":"2026-08-23T19:53:53.771452Z","times_seen":26,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-23","alert":"Phishing Block","trigger":"nexvero.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"nexvero.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}