{"report_id":"a4b68973-dfb0-4402-94d6-4ec29b9bac20","version":0,"status":"done","tags":[],"date":"2026-07-23T14:17:13Z","url":{"schema":"http","addr":"nexusxz.top","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":0,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"title":"NexusX","dom":{"size":25437,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19310)","md5":"836a840a6934448888c533c86a28ed47","sha1":"6b214ba432df40eb88ae20e4570af53a0383a20f","sha256":"bdec96e20be9241a95183d81bc10a559ddc6b33020cc419230bbf07f1f0ba945","sha512":"825b513d404bbbf658dc9e7eddc08173f933d0fdbe3371032f143d0aff904c48ed110b17929773b75e53cbe7c65d83b1aed62dfb95e4f0e67f8d7450df825880","ssdeep":"384:ck3ZCxg2kxG20TT4F4T+4FqcTV4FdTE4FZT+4F+Tw4FdT04FOXVzDQ+j4K5RIjqp:cmQxg2yyqVNHG9EQ61mYkdI","tlshash":"96b29b25a90041f312f3d6c5e3707f1db696f31b892e88483eae91951fd3db5ba3a160","dom_hash":"domhashefc2ae1c5b8dda669f915d4eb1dd72d8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexusxz.top","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":0,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T14:17:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexusxz.top","ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-07-20","domain_rank":0,"first_seen":"2026-07-23T14:17:16.684756Z","last_seen":"2026-07-23T14:17:16.684756Z","alert_count":29,"request_count":29,"received_data":2706340,"sent_data":13146,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-05-17T13:57:22.966844Z","last_seen":"2025-05-26T13:22:06.430698Z","alert_count":0,"request_count":16,"received_data":1642548,"sent_data":9043,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"s3.ap-southeast-1.amazonaws.com","ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2017-09-27T11:23:46Z","last_seen":"2026-07-21T16:26:44.212547Z","alert_count":0,"request_count":11,"received_data":41123,"sent_data":6019,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"mksjdfer.top","ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":12,"received_data":26162,"sent_data":6385,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-19T23:00:06.681739Z","alert_count":0,"request_count":1,"received_data":6842,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexusxz.top/charting_library/charting_library.min.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-23T14:41:15.072132Z","times_seen":1251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"9d3ada5e88b8be359a3f2fc71a6ccae2","sha1":"d80ed063135191ed155d6156695181eb9cfc0f8d","sha256":"e2e8b600b933c8092d67ad7624b762a5f327fae15835dc738270b520dbc5a9fd","sha512":"9c81220bfe1e1323c6463ca1fd5ca4db4a35ef7ce8ef5091ec60357ffd17548e2b861158a211ff4a749b64aa6fb37af4d1dd7d29abe9e7f7cbbcfcfe24c9113a","ssdeep":"","tlshash":"dfc08cc4b0c33e102612681154bf25e4a1244037b1882b438ce4d8493e630b88237e98","size":151,"data":"","first_seen":"2025-08-17T16:32:32.478042Z","last_seen":"2026-07-23T14:41:15.119381Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-23T16:00:02.524528Z","times_seen":6923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-18d77505.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a84eec3bebda359293d583b6113dfbdf","sha1":"97527dacd11bc30edc567e243a2ca1604d1a2517","sha256":"be008d9a4fae737c138d1572b372395e1f25ed324bdacaebe7f9c8b5ec0baa95","sha512":"2e05ceafc44f013bc78df11f7a7e327b8f09de29ce89781ff3419e95322aa0ae25e8436248ad25693c262ac31258445f8ec6f1dc6fb2138c132b4f20984d9426","ssdeep":"","tlshash":"35f0a29f79ba40731a734ca8d2031c25a62c2f1d3a60d5e15746593086748f5d65d624","size":596,"data":"","first_seen":"2026-07-23T14:17:23.980288Z","last_seen":"2026-07-23T14:41:15.097771Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-23T14:41:15.115698Z","times_seen":1361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"ce1cd94eb2f8dbf2150fc81c712987a6","sha1":"c00fdcbbcf7d6bf23575977d13fd9c2aa68f228b","sha256":"dae4cb3f8e134b291d4fe68676f3047fcd2372edff315f99a3de5adccf066b45","sha512":"c142788cd8a767b7f2fb5e4a619ce610dc063858c478d9421730bd58e853ff2c87022c3db9cf5cb9c802687167af67a0cb52706abf5d296a85d7a5a84fad8ad4","ssdeep":"","tlshash":"d3c08cc4a0c32d041646642068af24e8a0244026b0481b129de4d8482e630f49233e98","size":143,"data":"","first_seen":"2025-08-17T16:32:32.484968Z","last_seen":"2026-07-23T14:41:15.116611Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"e29cc4b739166fb0de3dd3960891cf94","sha1":"32bf92595a210346b3fa579ce87df4987f109d95","sha256":"d3b8857aaf83eedf7762ae5079cebc09d4924e13766d06fd68dbb746634f95e3","sha512":"854eba232753dfc9183d3029c72a8ec545156e6a966cbf69fbad7acd252632ee09b17f9666f3edfb4541f58d3d3bbfc9841f999c37cac48586997700b245e0af","ssdeep":"","tlshash":"7bc08cc4a0c26d102602651021bf38e490248027b0481b038c94d8482e630b08237ea8","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-07-23T14:41:15.11475Z","times_seen":3373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-23T14:41:15.104758Z","times_seen":1739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-23T14:41:15.1096Z","times_seen":486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-07-23T14:41:15.099652Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-23T14:41:15.117502Z","times_seen":931,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-23T14:41:15.101262Z","times_seen":1373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-23T14:41:15.110339Z","times_seen":642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-e4c6a390.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"085021039cce9ea59f84a21ac94e89db","sha1":"97e837e7cd72eb2d5c891a703aae91e690745455","sha256":"1bbad59bae9192c089303954ef4234774ba8e0c3e85479b61c751f3cdbfc3c83","sha512":"7ea916e28da06d8497ae9582bea9e4108ce62e09dc64a46c8391bfc4b1363e386b85bdd231df957f911bc5024cb7ad7ddc51a65e3cfbbc657be56a9ca1218405","ssdeep":"384:+ldG9gtzcgP/XuZdZA/0CvXiWOFcudWfO/ARl5SVxemWEobpdJQcCUxR26c+Z:+ldGaui/o1UXfq1dWfOZipdJQcCqjp","tlshash":"7d52b955f8069a3df5b7e0116498002077393fea500d49f2b4bdaf5a2353ef8b79da18","size":14249,"data":"","first_seen":"2026-07-23T14:17:23.960485Z","last_seen":"2026-07-23T14:41:15.075585Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-2fc9e0ce.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f518d7b5f89c5922151c1b510339eb97","sha1":"bb6e4f87c8c2857b84f5875fa414055ab26ba418","sha256":"22223f3530daaa6a7228c4d8e6e22fac382a8db7a852320ef55a58750a758509","sha512":"28e0f9193b72fa4b2996d717f4864c6630074665acb172aee28d5daaab283911eb38793084ef334022338824d1c50039b9a682d5918402cc92aeac1f96735d53","ssdeep":"","tlshash":"b401d0f9fc0dcebb1f620a4002913501140a1fddfa2419f198977e661be4950d7de72d","size":772,"data":"","first_seen":"2026-07-17T15:53:10.201125Z","last_seen":"2026-07-23T14:41:15.094524Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/filters-7ebac8b3.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b872605aa16ba92f21aa8251fdb494b3","sha1":"c47f63be4ab650094753650a3dc964e1cc199222","sha256":"478fbbe4bec21c7275d66c258228cccb7a42d5d1ad3077be014caf8f6df340a7","sha512":"4719bac9a327706365f2a9e8a7788d72eea3573312bea159c1a9e121fb7b28fd4548edfd726dbe1b55fac9513c5cff70d6ef795ab2db661de9a704d58fd324a2","ssdeep":"","tlshash":"a05153fdfcd3a13346ee5dfa452c4414718ebe25686e0a0ef55bd0456a23488e0bf768","size":2920,"data":"","first_seen":"2026-07-23T14:17:23.952131Z","last_seen":"2026-07-23T14:41:15.097008Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-07-23T14:41:15.10041Z","times_seen":577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"123419f7a2cdbfa12d4cff807363da88","sha1":"c738fd709864e7cf287b503989abce5e06b90a24","sha256":"f8bafc05e851a1c9a8331dd6af9757f58a0d14695b2d9390529bdc56e9b71898","sha512":"5bd11ef2ea53924e9a6077e24829d255123a2f35a65ca76ad7db4256d30198ee3c988dbd303ced0d83bb58de1d4b5e0e5f4efc49451e6b13fc705720d31bf436","ssdeep":"","tlshash":"9611abfe191a60296303404f976b7801642260a9001a184173ccaa9dbb9af6dd0cbb8d","size":1034,"data":"","first_seen":"2026-07-23T14:17:24.01906Z","last_seen":"2026-07-23T14:41:15.10561Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-07-23T17:32:07.932323Z","times_seen":40618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-07-23T17:32:07.932828Z","times_seen":42182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-23T14:41:15.113531Z","times_seen":4374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-23T14:41:15.111569Z","times_seen":2091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-89dbe42a.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8136d2ef0eacfacc10cbef70d60fd537","sha1":"145b67fbd275d10bc3e38498a66f3942c8244c5d","sha256":"108263316b886f9325e4a8a0b88c0759b08a71ec1edf4c2f28ed43f04d734b3a","sha512":"2f259cf5b2741ccb7b89d990a31ad2b7982bc8700b208d14451ce91f851792dad459bf9c4598e9f27fc04868e0a22ecf9c3577ad2ea6e91d44e48de964b77ab2","ssdeep":"768:DPM6xm1gaoUfnJYUWPeDbqDPS9fczt6h+kd3xLDpBvtuPyWCKB9hOjk1TGfWEZ/t:CdcemrYXpKB9vEk+tRFXtcrcBv","tlshash":"5fa31a85a4070fbf697d1c44695a158021691fc34406c88bbabe7d3a33edce6625efb8","size":105556,"data":"","first_seen":"2026-07-23T14:17:23.932428Z","last_seen":"2026-07-23T14:41:15.072747Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-e91d1a17.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"1088f8b0271afdaa4e2ff1878e482e61","sha1":"07c73c1a49af477e61388c21e7b666b524b7b74f","sha256":"86dd55002252eae8b2009a00e8d4fd824a8cade5b619487c9ea299f2fafa7152","sha512":"5ee40ad06b102590a9c284962c59d2a556ea424cb3bb58488ed0b2c3dc46f124e543d130b6b21f2e739b264a834399512aee56445ea2a3feeee185ab19363483","ssdeep":"96:0BX7+uEnYcdIqD+w/M7pNfYsvboyUzxKMVKEr5y3hv0c3iZQ4Sbjo:YX7+uoYcaqiw8fY8bUxZ31Chv5vTo","tlshash":"4db1e94ef802c57daaa3a40548580420354d7ffba1888cf6f2bddc0977b8e79d790766","size":5096,"data":"","first_seen":"2026-07-23T14:17:23.974615Z","last_seen":"2026-07-23T14:41:15.065457Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-23T14:41:15.098872Z","times_seen":1627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-23T14:41:15.103089Z","times_seen":1180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/vendor-c59f116c.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"9535777225d4ca8402e7f4ac4e18d9dc","sha1":"01f77105a834ddf26cb75804bd0aad83651001b1","sha256":"4f99a9ad431d402d248874394972d0b5b7a98a58ec01d0cb686572ca013e3d6e","sha512":"35140b58258314f6ab10990cf0e17e4b845468e6f82814b7ffd38f2a3ca008695e47291fa52b376e6d30b0703ce84afc38ecc424033aede96ceb80bddf560234","ssdeep":"24576:sriy37lZn2nYuvC4+pNY8hsW/j6V0moa2S:sriy37lZn2nYuvC4+pm8hsW/mwS","tlshash":"6f0539c97292f06147ab24e240bb0006f3396e59744e84a4f1ad98db7d7ad89d277f3c","size":874275,"data":"","first_seen":"2026-07-17T15:53:10.161647Z","last_seen":"2026-07-23T14:41:15.073371Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/currencyItem-f1916cd2.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"8711852e42b388348cd4f86e81014eda","sha1":"2025785242592a0637608505d5f1be79bd8bf00b","sha256":"896de4bcf968b76f49dab8088a6da6596b4855f0cf867bebcc2bd2ed4b3c89c4","sha512":"cbb6c1907a017571efc57e8c3276a83581a32ed593247ec90baf9756e6e816d389d317e4243c0587cbaf05b9849db65618373e1a4bed840282784c715df85ee5","ssdeep":"","tlshash":"7351e1d4430665b5d37521e1e4886c1866bc7fdaf250c9def7f8889477628e84320d39","size":2647,"data":"","first_seen":"2026-07-23T14:17:23.992777Z","last_seen":"2026-07-23T14:41:15.067565Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/en-4cc71bfa.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"1db3221d423aa7340a6e7b5d9ae57bb3","sha1":"25e432b748b50352996f1e124c4117b072e34397","sha256":"5de1b28e8f732a1c983d7a06375fbea021d3946553608b60585e9f7c5fa929d3","sha512":"f82ccde94260bc56d921d5060c9651135d95809eb2f2381a67e0dd843e43073c702f91e62b0f17c735da2e3a59cc81e370f50a5631a1f5345917f71af1655b94","ssdeep":"768:+GtZcEw/o7rKOrWAsi5AW26r5aA1FRoP6+is3G9k8mwO6fpk7aO5t8O:iponKOyAY6rbFRhs3Wk95tX","tlshash":"2903d7897e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd53e2b67a363b34","size":41396,"data":"","first_seen":"2026-07-17T15:53:10.160756Z","last_seen":"2026-07-23T14:41:15.087761Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-23T14:41:15.11264Z","times_seen":1615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"60cc1ce0a8c7b5367137c4733de8bfba","sha1":"1c1ff4ddf99ce55adc44ed78dd47e570992140e9","sha256":"7a1340f6144a4cc84bac6e1242f72d05cdda0f94d86052e6c81878619fe20608","sha512":"6d22c0d8b2d2ed54b3365349fb70d36ad11fb3253650fe015adc3ec2913c117f4d08df7c850975722a7949e1861d41166bebdb062fad5e101ace41d5b92c4fe2","ssdeep":"","tlshash":"86c08cc8b0ca2e002a17649024af24e8a0248027b04c5b668df8d8582e230f08233e9c","size":148,"data":"","first_seen":"2025-08-17T16:32:32.487843Z","last_seen":"2026-07-23T14:41:15.103951Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-07-23T14:41:15.107982Z","times_seen":1047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-07-23T14:41:15.108786Z","times_seen":789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/#/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-07-23T14:41:15.120289Z","times_seen":1728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexusxz.top/","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T14:16:36.762Z","timestamp":1784816196762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:38 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-1478\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5240,"size_decoded":2269,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"290375c1a7d1ae8c1ebf686f35a96947","sha1":"2b44dd05fa2dedc52e631004c3c4f9219755d648","sha256":"10fd15d879261af1cd85d939f22e6bae235a58ad55b3d7e4e47d69404c3b87fe","sha512":"83f6ad0b7a46725334e8556f0e832f940c935877326aba1f1b2682d2a6bae2148d75bf9f8c305db43bbd9c418e511e0ecf14ab3018484245421f4a9f51c05514","ssdeep":"96:Tr82yDY5yKuc6Pt0DyDfDKDFDJt/DNDWr6TCZydHRH/gnu2mUsGKAiowGpuB1niX:TFgYL6PIgLIlJZ9yZCxfcu2nfD3bpuB4","tlshash":"89b172b798f0c82a2261223bebdbf0185e612193852d585875cd90ed8fd0fe5c4dbb75","first_seen":"2026-07-23T14:17:23.919376Z","last_seen":"2026-07-23T14:41:15.06432Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1825,"timings":{"blocked":0,"dns":46,"connect":215,"send":0,"wait":240,"receive":0,"ssl":1324},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/platform/dev/logo_57.png?2.0.1784738000224","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:42.460Z","timestamp":1784816202460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /platform/dev/logo_57.png?2.0.1784738000224 HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Jul 2026 09:14:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5de705-1aef\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6895,"size_decoded":7366,"mime_type":"image/png","magic":"PNG image data, 57 x 57, 8-bit/color RGB, non-interlaced","md5":"af9f087539eb3c5ef2d3db57832f4cd6","sha1":"2e099ecc8b6c6efbd626c852eed73b583cb4d935","sha256":"ee076b68a27efdfcd9f52e0b11028e378eb3904051116390adf759548fdb9937","sha512":"b76bb090e9321ad851465806d795ed8db6d0726b2b11d624f5808fda42a3ebdefda3d3a6a53690e18693dd0e36b1930159d5afa6837aa68930f82031624f7c96","ssdeep":"96:MS7Ot9FBCDfiDtsnvXH9OI80OO4jg/6huAH3grLTv3XeDLKCz8xVXDF+:MS6DFcDfiDtofQdBhGrfvHeDFz8DXDw","tlshash":"f1e1ae70ad8476c24db88a812f809de05d26ceb53f223543ed9b6194f0732fb29a175d","first_seen":"2026-07-17T15:53:10.137385Z","last_seen":"2026-07-23T14:41:15.071393Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/resource/fonts/DINOT-Medium.otf","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.266Z","timestamp":1784816212266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusxz.top/assets/index-a4b76261.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 28 Aug 2024 14:08:52 GMT\r\netag: \"66cf2f74-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":73551,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-23T14:41:15.088552Z","times_seen":1698,"resource_available":false,"data":null}},"time_used":6739,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4169,"receive":2570,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/resource/svg/light/zu447.svg?2.0.1784738000224","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.307Z","timestamp":1784816212307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1784738000224 HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Wed, 28 Aug 2024 14:08:52 GMT\r\netag: \"66cf2f74-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":860,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-07-23T14:41:15.075049Z","times_seen":453,"resource_available":false,"data":null}},"time_used":5768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4128,"receive":1640,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/ETH.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.310Z","timestamp":1784816212310,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/ETH.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dTTpK1xk/XL0emxm2QWh2WEyu0G59jUsttRqFlKBwilM+L0GXBh9eT+MZeiGAT1V3iNhQtyRnwUMn9ZYH9rpXR/L0wuWyP3P\r\nx-amz-request-id: 9G3ANN8T1B8M19QD\r\nDate: Thu, 23 Jul 2026 14:17:00 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:40:32 GMT\r\nETag: \"39d54251b232d1e9e8a9665e7c2c5117\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 9561\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9561,"size_decoded":10028,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"39d54251b232d1e9e8a9665e7c2c5117","sha1":"025f4d72498175bf3219ba5fe2a6341b791d8b24","sha256":"5212de593ffa17b5acc04260fe702e32b3bb815f2eda4d7ca15b085967bd39f3","sha512":"c2f616084a077398dbed12026099332369ae72f8743c1a3acf1603af3a8ce032ac090cf0bc89d11270e8e2e6bd7d79383d556db591d19459bb873aab16daa0db","ssdeep":"96:dFdUh3pppql79CzKT7MLbrbKIgB1lpIRrFjWzR6/KPax4SfPUFvzJ/OWCVe8pabE:ZSfpEAzXzvElkFjy4rNcFvzYJVjaLypt","tlshash":"e112bf6f3030faa4599c8beb653659c09457b5b3868c38230aeee8ddecc54e088813c5","first_seen":"2025-04-01T12:02:22.555194Z","last_seen":"2026-07-23T14:41:15.077431Z","times_seen":818,"resource_available":false,"data":null}},"time_used":7794,"timings":{"blocked":-1,"dns":13,"connect":268,"send":0,"wait":296,"receive":268,"ssl":6949},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/uw.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.280Z","timestamp":1784816212280,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/uw.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IASVsk09D25tyCGfGo/5IhL4Xi0VOJukPazKbRL+KT+TJfSCbWaYmiZcyPE+E//vkedWUUTYPvXPUdMYE5Cfs7v+zHH8JSp8\r\nx-amz-request-id: FCR08XDTJZ531GKJ\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:44 GMT\r\nETag: \"f77e0a371c03a9081cfa8ebe208e3527\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 4528\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4528,"size_decoded":4943,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"f77e0a371c03a9081cfa8ebe208e3527","sha1":"51220d20471f0454c7694279a52b36d73a000cf5","sha256":"8cb1e0d06855c8d7d402255d3e7fafaa47bef649f67d1e6579c1d57a367043df","sha512":"39687a99acbbf79bba348951ca1abda1807713e256624fc2521333e8f7caa85ef0a4d47886c4c20543d852f9626a1a5f3f95bcc760acd40ec29caff462e21788","ssdeep":"96:pSOnukIp1jp69U66pf5vvx9hzeL+9IxXpiKBS/Z1iYCnsU:pSOnuzthphHJv2xXDM/Z1iYCsU","tlshash":"a0916eeeb257787f89323cbd4d09c7e35fe3b5b8270b9c2c12551871a5bc66065020e0","first_seen":"2024-12-28T13:26:39.044448Z","last_seen":"2026-07-23T14:41:15.076721Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1736,"timings":{"blocked":-1,"dns":3,"connect":272,"send":0,"wait":294,"receive":0,"ssl":1167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/DOGE.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.322Z","timestamp":1784816212322,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/DOGE.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dRUsN04b/6NDXmy8PrhrrW+9VtvjcHqe3wldVwMMqvHaw/gWnSBMaoECHNYBwvS5GQ0D76efLztUGm9adDJOZQcpA8YHj3wc\r\nx-amz-request-id: FCR46Z58W1V7EB40\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:40:23 GMT\r\nETag: \"0baf5204443fefce8ac541b3e6d7ac69\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 45640\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45640,"size_decoded":46108,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"0baf5204443fefce8ac541b3e6d7ac69","sha1":"4e70654a4f0872f1aa27b70c6333122f2ef09244","sha256":"c428f059631b0c2ff03362aae6d3ed5cd86378e185d56c4418be8c01e9cb3338","sha512":"b0697161a9a9aa124d3bc3e11dbf4fea5b021cd762991457c1f5adff898f68fd16f1014804cd1a15d78375a31856b87b27ec8d61cc7764bda5a825934485669a","ssdeep":"768:LYxtnsRoMwyv5ivYJHLNsssIVztw/nj2E8sco/xvLUvDLVunA93:8SRfvIeBlcqmxjUv3sI","tlshash":"c42302dc08e5426cde8204b6679a98e1947ca1c75a0f8cccaf97245b521f1c78ceb76e","first_seen":"2026-03-11T02:08:24.239894Z","last_seen":"2026-07-23T14:41:15.061748Z","times_seen":34,"resource_available":false,"data":null}},"time_used":1911,"timings":{"blocked":1355,"dns":0,"connect":0,"send":0,"wait":289,"receive":267,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/hq.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.328Z","timestamp":1784816212328,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/hq.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: VeKAfUY/xuNkW59el1sh+JPJzeqtMnvtimqROyxbvxIkTzipEK7rwAZiam0HmcOvvlfFkmJO6Vtrd07Lr172pmG6A83pZiQK\r\nx-amz-request-id: FCR6E03BFCQ5SJC5\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:56 GMT\r\nETag: \"2df020572fc86b1a2010e2ba1c3b39d2\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1293\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1293,"size_decoded":1708,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"2df020572fc86b1a2010e2ba1c3b39d2","sha1":"5c59a5e88977f99da2f52f34411071c19e33d5bf","sha256":"71a410c16b6deaab74221ae58b22462611e386b1aa5a5a3643b0960384556e6b","sha512":"c1bf565a1527105d20506e117de3ac51fc2b1efdbcbe68f24de6d9ebd8eaadda3b9762ace6f59e87cc49204e8e0c22838b7c0eeef4f1b680ee4867c736b61472","ssdeep":"","tlshash":"e221686de941f8419448ba831ce2c1778b3749c86bd1f491e89fc04b56755fd84698cb","first_seen":"2024-12-28T13:26:39.039731Z","last_seen":"2026-07-23T14:41:15.079409Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1370,"timings":{"blocked":1073,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/sd.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.295Z","timestamp":1784816212295,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/sd.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: hVlRjabcuXd87AN4lfKX+V9FreoL0j74ksVbRIpFiugLREXFjYe6WC1OnDnGAsMs55Zn7R30lpXP7QxWcdtdMtJ9B/KqRCNb\r\nx-amz-request-id: FCR5RZ92DJB8JGQZ\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:53 GMT\r\nETag: \"708ee29d5df323d358294fa46b0e3773\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 3916\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3916,"size_decoded":4331,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"708ee29d5df323d358294fa46b0e3773","sha1":"cadd539126d49f16e804e6ba8c1ef11447f370ac","sha256":"82156e7a586fb0dbde0ef13c8ff5b0b7251adc668a9149ac70644f19f2d78600","sha512":"e43ca082f2c0a6e70f0c1856198369ceee87303008f58f29668bcb88df7619653f5847d86f3d2dcc28db2d019a28d569d0ea3d361be62fb5c8df2dd0041058fc","ssdeep":"","tlshash":"a4815dd4bbb1550192bc5d2516f9c0bd02620580a5f0f306d59fd12b57901e93bdb9ff","first_seen":"2024-07-26T23:59:09Z","last_seen":"2026-07-23T14:41:15.069031Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1123,"timings":{"blocked":-1,"dns":0,"connect":273,"send":0,"wait":307,"receive":0,"ssl":542},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-89dbe42a.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:39.096Z","timestamp":1784816199096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-89dbe42a.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-19c54\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105556,"size_decoded":29128,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"8136d2ef0eacfacc10cbef70d60fd537","sha1":"145b67fbd275d10bc3e38498a66f3942c8244c5d","sha256":"108263316b886f9325e4a8a0b88c0759b08a71ec1edf4c2f28ed43f04d734b3a","sha512":"2f259cf5b2741ccb7b89d990a31ad2b7982bc8700b208d14451ce91f851792dad459bf9c4598e9f27fc04868e0a22ecf9c3577ad2ea6e91d44e48de964b77ab2","ssdeep":"768:DPM6xm1gaoUfnJYUWPeDbqDPS9fczt6h+kd3xLDpBvtuPyWCKB9hOjk1TGfWEZ/t:CdcemrYXpKB9vEk+tRFXtcrcBv","tlshash":"5fa31a85a4070fbf697d1c44695a158021691fc34406c88bbabe7d3a33edce6625efb8","first_seen":"2026-07-23T14:17:23.932428Z","last_seen":"2026-07-23T14:41:15.072747Z","times_seen":6,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/common/getAllSetting","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.847Z","timestamp":1784816206847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:48 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":817,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":1692,"timings":{"blocked":-1,"dns":0,"connect":242,"send":0,"wait":223,"receive":0,"ssl":1227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-cd5564f2.css","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.864Z","timestamp":1784816206864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-cd5564f2.css HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 61\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\netag: \"6a60f0d0-3d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":494,"mime_type":"text/css","magic":"ASCII text","md5":"c92d168300e8aaa5a726981d9dc6cc1f","sha1":"740d6960518775fad58164340997ce0a8602038f","sha256":"cd5564f29c00eca8ff0c790a1f27f631131aca7fa40e900c21cd8d985161c586","sha512":"bf0988fe3b43b04517244ad66f4378d393022ea6b122a3d3f4537606d97364512ee89bc3c403ddd51b45e28634df208f30198a9da792682cf53bb54b9f723c9e","ssdeep":"","tlshash":"08a0022d11596414b2264751ff0ee94dce687a139a95424663071e9135dba0e265820a","first_seen":"2026-07-23T14:17:23.936491Z","last_seen":"2026-07-23T14:41:15.086949Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":931,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/resource/svg/light/cebian.svg?2.0.1784738000224","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.276Z","timestamp":1784816212276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /resource/svg/light/cebian.svg?2.0.1784738000224 HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 547\r\nlast-modified: Wed, 28 Aug 2024 14:08:52 GMT\r\netag: \"66cf2f74-223\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":547,"size_decoded":987,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b6262611375e7ec9ef12a1998835506","sha1":"2601ba7747c49a4a7a0b7cbe79859848eacb38dd","sha256":"1e208fe8418cbcd713ebaa963c352089c18b831625f6438134da6a02e37108e2","sha512":"44d69f20cb3467fa81907e993007ea1ad1f36ef83637ed7c86ff8332433afe9dcdb15d9f94d06f9fe9606b2fc40d998d3765e41c7e477bcf2bea294113d0d12b","ssdeep":"","tlshash":"e8f04649a82d601d10110905c7d21f88202ff103c76a085efbe1167f9b31c9b68bc3ae","first_seen":"2026-06-01T14:24:35.109911Z","last_seen":"2026-07-23T14:41:15.044261Z","times_seen":16,"resource_available":false,"data":null}},"time_used":6961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4159,"receive":2802,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/currencyItem-895dcd5a.css","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.870Z","timestamp":1784816206870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/currencyItem-895dcd5a.css HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-6d6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1750,"size_decoded":944,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"2fa9c36b7e51d475a9f37c25e5281188","sha1":"61e40b108a88dd3e6808050c609dea23ef3295fc","sha256":"895dcd5adc95023b2e93de5cd10eaca701972625f5e7158cc3bea0021d4f6465","sha512":"10f9f214fd3f0cf958bc009d41d1d0bf4506a521adf5b245672e85383a1a14a9c11de78e3ae245a2261ca31c054d4531c6d5cbdadb03591bec5429ffa4d1c4ff","ssdeep":"","tlshash":"2931ac94571603f4f937c48a7ea8014c90543fc2a85b9acde88f6e371dcbad35b7096a","first_seen":"2026-07-17T15:53:10.147768Z","last_seen":"2026-07-23T14:41:15.048346Z","times_seen":8,"resource_available":false,"data":null}},"time_used":926,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":926,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/resource/svg/light/mengbanzu12.svg?2.0.1784738000224","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.303Z","timestamp":1784816212303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1784738000224 HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 802\r\nlast-modified: Wed, 28 Aug 2024 14:08:52 GMT\r\netag: \"66cf2f74-322\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":802,"size_decoded":1242,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-23T14:41:15.081449Z","times_seen":969,"resource_available":false,"data":null}},"time_used":5772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4132,"receive":1640,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/6fad1864286e4efc8e93f27351c6d298.jpg?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.817Z","timestamp":1784816212817,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/6fad1864286e4efc8e93f27351c6d298.jpg?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /7qrCDaQ5BG4shFE4GpZgJy3yHlxtUqLg7PaO3gafpZ7BMvhiQqvsOoLxU/zbwA5eLBbw1jWkpAUgvwZb6YM/zA3CbsNNQCB\r\nx-amz-request-id: FCR7X005WEY1C3QZ\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Sun, 28 Jun 2026 08:29:29 GMT\r\nETag: \"1979f5269ea0a4844627dddcc704b2ae\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 138734\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":138734,"size_decoded":139177,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1277x728, components 3","md5":"1979f5269ea0a4844627dddcc704b2ae","sha1":"97244abd5432d2bfb1e7876c5aa634884d1334bc","sha256":"fa95affee1e68e86449fb6b12867bd0b6ce7b87fa8db96c3b118d7e7c29c4f2e","sha512":"3e529ee16e9a696873c4119583e70ecf7ddf32c725357763eca59c6cb943aba92a3ece74eec927bf26095bef00ed5fe2173132fd06885e6c5f89b87eccafbf38","ssdeep":"3072:3Q6/HXXmZ55lUbREZVDyhNkEnLT4PeRVD8yHgjqDprQ:3khlWQWD4mPD8E3D5Q","tlshash":"89d312427cae751bc1170de687ef6c9e7e447241ef44a481787a0f597afca3246f0a28","first_seen":"2026-07-17T15:53:10.13949Z","last_seen":"2026-07-23T14:41:15.056655Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1442,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":297,"receive":541,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-bc011be9.css","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.859Z","timestamp":1784816206859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\netag: \"6a60f0d0-18d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":832,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-23T14:41:15.085304Z","times_seen":1427,"resource_available":false,"data":null}},"time_used":1133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":936,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/common/getCoinList","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.875Z","timestamp":1784816206875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:47 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":817,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":209,"send":0,"wait":225,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/wk.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.287Z","timestamp":1784816212287,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/wk.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: YDqsDz2lpMOSU/XwXONKLIBQgwhV12YAI5NaD0qdTxgjayKx+/wZtBHgCL55qfha7/RKkh/nBo4bFsTfVprbm7lF6rIVnV2n\r\nx-amz-request-id: BA34MZP0Z51GH6J7\r\nDate: Thu, 23 Jul 2026 14:16:55 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:42 GMT\r\nETag: \"7400b0a36fc576528703472ee79e2048\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 3639\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3639,"size_decoded":4054,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"7400b0a36fc576528703472ee79e2048","sha1":"87fd72303fec04cc06d8cfcb2e449251b05d6181","sha256":"d0db6c729c5d5ddd5e6aec8312c3e62c0a4a18f794c5c83e514d22c9dc4d4aa3","sha512":"1f4b5a5c936cf346316079d84b68a4489e56332ff119b857ac346618cf9555d72a8d5576149690a12496bfb20d91fc76f91fc25ab0f55ba4cd2a488d490fd431","ssdeep":"","tlshash":"7e716d6cfb729983e187d685609041b3272b48c4d6e0f1dff16fc826087478e1e648db","first_seen":"2024-12-28T13:26:39.019067Z","last_seen":"2026-07-23T14:41:15.073965Z","times_seen":14,"resource_available":false,"data":null}},"time_used":2100,"timings":{"blocked":-1,"dns":0,"connect":257,"send":0,"wait":282,"receive":0,"ssl":1561},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/vendor-c59f116c.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:39.097Z","timestamp":1784816199097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/vendor-c59f116c.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-d5723\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":874275,"size_decoded":289770,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9535777225d4ca8402e7f4ac4e18d9dc","sha1":"01f77105a834ddf26cb75804bd0aad83651001b1","sha256":"4f99a9ad431d402d248874394972d0b5b7a98a58ec01d0cb686572ca013e3d6e","sha512":"35140b58258314f6ab10990cf0e17e4b845468e6f82814b7ffd38f2a3ca008695e47291fa52b376e6d30b0703ce84afc38ecc424033aede96ceb80bddf560234","ssdeep":"24576:sriy37lZn2nYuvC4+pNY8hsW/j6V0moa2S:sriy37lZn2nYuvC4+pm8hsW/mwS","tlshash":"6f0539c97292f06147ab24e240bb0006f3396e59744e84a4f1ad98db7d7ad89d277f3c","first_seen":"2026-07-17T15:53:10.161647Z","last_seen":"2026-07-23T14:41:15.073371Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/filters-7ebac8b3.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.866Z","timestamp":1784816206866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/filters-7ebac8b3.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-b68\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2920,"size_decoded":1529,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2919)","md5":"b872605aa16ba92f21aa8251fdb494b3","sha1":"c47f63be4ab650094753650a3dc964e1cc199222","sha256":"478fbbe4bec21c7275d66c258228cccb7a42d5d1ad3077be014caf8f6df340a7","sha512":"4719bac9a327706365f2a9e8a7788d72eea3573312bea159c1a9e121fb7b28fd4548edfd726dbe1b55fac9513c5cff70d6ef795ab2db661de9a704d58fd324a2","ssdeep":"","tlshash":"a05153fdfcd3a13346ee5dfa452c4414718ebe25686e0a0ef55bd0456a23488e0bf768","first_seen":"2026-07-23T14:17:23.952131Z","last_seen":"2026-07-23T14:41:15.097008Z","times_seen":6,"resource_available":true,"data":null}},"time_used":929,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":929,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/lc.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.301Z","timestamp":1784816212301,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/lc.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: BOUaC4nZJFYjnvbuYylyJ30OHD5dxRxFmqcWwd2OCjkTwESpaET/Rx/P/iZPA8rcjeDA7Tmlgm8yfWk/GJm7P6+6+YImjO3+\r\nx-amz-request-id: FCR6X7HWR6TKRRYQ\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:45 GMT\r\nETag: \"7dc3cab2c5a154ac53ed31fbc116c45b\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 4244\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4244,"size_decoded":4659,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"7dc3cab2c5a154ac53ed31fbc116c45b","sha1":"7205c9b5af4bc0820cd6d1bc1a2ccc9748565d9d","sha256":"6ec41c9f9debd149c634eb7ebf13f578fe22555592c8cfdf91887add56a3b3ab","sha512":"db041a9ee1bedc14d28077947494f0d38ae8cf23a1f5f2779cb62cca817d1d875b4c9b46978ccca6d26503ae306a239ec22db05022be487c5f1c1b0e6ec526f6","ssdeep":"96:P/7anLWhow+OzQBmYs+QNG4GqSwZAx47pqO4DPRqYC4WVmnc:P/enqhEBFs+QNGOSw847p6D5e","tlshash":"85918e594c43c13088d6823bbd869872f98d6b5dd22b7a451a7d3453e3acbbc9311362","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-23T14:41:15.080731Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1306,"timings":{"blocked":1022,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.332Z","timestamp":1784816212332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":827,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/platform/dev/logo_57.png?2.0.1784738000224","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:48.658Z","timestamp":1784816208658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /platform/dev/logo_57.png?2.0.1784738000224 HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Jul 2026 09:14:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5de705-1aef\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6895,"size_decoded":7366,"mime_type":"image/png","magic":"PNG image data, 57 x 57, 8-bit/color RGB, non-interlaced","md5":"af9f087539eb3c5ef2d3db57832f4cd6","sha1":"2e099ecc8b6c6efbd626c852eed73b583cb4d935","sha256":"ee076b68a27efdfcd9f52e0b11028e378eb3904051116390adf759548fdb9937","sha512":"b76bb090e9321ad851465806d795ed8db6d0726b2b11d624f5808fda42a3ebdefda3d3a6a53690e18693dd0e36b1930159d5afa6837aa68930f82031624f7c96","ssdeep":"96:MS7Ot9FBCDfiDtsnvXH9OI80OO4jg/6huAH3grLTv3XeDLKCz8xVXDF+:MS6DFcDfiDtofQdBhGrfvHeDFz8DXDw","tlshash":"f1e1ae70ad8476c24db88a812f809de05d26ceb53f223543ed9b6194f0732fb29a175d","first_seen":"2026-07-17T15:53:10.137385Z","last_seen":"2026-07-23T14:41:15.071393Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3085,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3085,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-757eae93.css","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.860Z","timestamp":1784816206860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-757eae93.css HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-ab5\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2741,"size_decoded":1289,"mime_type":"text/css","magic":"ASCII text, with very long lines (2740)","md5":"bd3d7b1176543f5649db0940ca886137","sha1":"5f36dfb7051bae30b26a6dacc2b3c5d19fd3c6fb","sha256":"757eae939c625e73b0c34353f609dbaf026faa039143aa063a2da709b69fa178","sha512":"5cf3a802c695e9b1753aa27985e5526280361fc32183d2a9e101a4e50f4e1c9a956be02a94474385de9fab8798bb0349e9ddd08be4bf09f5fd3a019935204b9c","ssdeep":"","tlshash":"3251110ceb9915348d77d68bae4c5a4ce010bea3e44fee85f14b831a0acf6e32760655","first_seen":"2026-07-17T15:53:10.142836Z","last_seen":"2026-07-23T14:41:15.066653Z","times_seen":8,"resource_available":false,"data":null}},"time_used":935,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":935,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/resource/svg/light/zu29.svg?2.0.1784738000224","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.306Z","timestamp":1784816212306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1784738000224 HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 840\r\nlast-modified: Wed, 28 Aug 2024 14:08:52 GMT\r\netag: \"66cf2f74-348\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":1280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-07-23T14:41:15.059941Z","times_seen":923,"resource_available":false,"data":null}},"time_used":5769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4129,"receive":1640,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/XRP.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.314Z","timestamp":1784816212314,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/XRP.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: FGxQiEjv8lbGcB1y6KoFQu8qyAzVXwvyzqP5a6bIMMqTW2/HgFnFTKjfiyTONR2+AbpE8VBLuue69HidC/AuWOvk+Mp8dwFE\r\nx-amz-request-id: FCR74JNCZY3K496J\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:41:16 GMT\r\nETag: \"f234458833e5b0d915d8b6d01ba15175\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 9653\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":9653,"size_decoded":10120,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"f234458833e5b0d915d8b6d01ba15175","sha1":"f464f86c7716d57c7047c6e206d956e68e915426","sha256":"1d2bb46351e7eccbe5b66ab40dc6f604207258e90a78d2c663e79cbd72e4faba","sha512":"2649e6f327db292d91420c2e0e2f7552dd9639b5f2cb675dcbfc6c0d12b35b27d848f64f817fd52f6d3a666fb3fff2e07ddd533e3907a2308cf5d0e4c7f4f086","ssdeep":"192:dIdQI3mXLQJKi0n8uKxZXJNcV3aK2dp1PEBGQwhB46:K4LcKhnHEE3aL31PZQwJ","tlshash":"4312aff7f240e564bb599c1f1ed459c18cdec9359be69590d39cfd03c97961c3015016","first_seen":"2025-08-04T05:09:58.814402Z","last_seen":"2026-07-23T14:41:15.069872Z","times_seen":46,"resource_available":false,"data":null}},"time_used":1111,"timings":{"blocked":-1,"dns":9,"connect":269,"send":0,"wait":295,"receive":0,"ssl":538},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/notice/list?key=ROLL_NOTICE","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.333Z","timestamp":1784816212333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":827,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/2ec49371e1f448818c5515b5ef83cb6f.jpeg?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:58.960Z","timestamp":1784816218960,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/2ec49371e1f448818c5515b5ef83cb6f.jpeg?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: dBVr0fOtd3re7wwBRatclpq4T6+7gr1h4Rh8eSyNMO8YzG+4I1qGko8aU1Kl9oFfoOvlQeIcY9V7kYRvpHXj7RjZmv6Vbo+b\r\nx-amz-request-id: 9G3E3YRMWF6D5RTF\r\nDate: Thu, 23 Jul 2026 14:17:00 GMT\r\nLast-Modified: Sun, 28 Jun 2026 10:33:11 GMT\r\nETag: \"c6984a488f738ae9863f078f360a6508\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 297932\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":297932,"size_decoded":298375,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 3600x2024, components 3","md5":"c6984a488f738ae9863f078f360a6508","sha1":"dc5450bbb67c4aa0307b4979423a85de70e452d6","sha256":"7f027e646c34fcfc9bea7500b26d1e5920d9aae92679a3bf42ec17bbec9bba89","sha512":"1c5e82a9b34bec0fb6b05319c93816d4b6cd1fac5963920fef9b3a197bb0e2996e0d51074c088b5ccaa29e22a3752cffdd09d72934de782611bb71c92ef6d28e","ssdeep":"6144:Vk0De8p7pGztxaTVRHqlEtAGgB8+6ZWdl1HDM:Vk4e07Qztxa/HcE0BOWdbM","tlshash":"b454e027dc009a83952597e8bf078eae6950260df2c635eab12fdfd73f301615d4e06a","first_seen":"2026-07-17T15:53:10.172104Z","last_seen":"2026-07-23T14:41:15.083741Z","times_seen":8,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/vendor-72ef657d.css","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:39.098Z","timestamp":1784816199098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-16997\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92567,"size_decoded":38028,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-23T14:41:15.063007Z","times_seen":329,"resource_available":false,"data":null}},"time_used":3222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mksjdfer.top/ws/45bfe37e-aaf1-425e-88e3-cf3639b1c577","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.845Z","timestamp":1784816206845,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"GET /ws/45bfe37e-aaf1-425e-88e3-cf3639b1c577 HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nexusxz.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Pkc4ysgTKgtQUITNASh+ww==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Thu, 23 Jul 2026 14:16:48 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://nexusxz.top\r\nAccess-Control-Expose-Headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: YjYxJkNk+nHoe2xX8LHYrRreLX0=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":604,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":2001,"timings":{"blocked":-1,"dns":658,"connect":875,"send":0,"wait":227,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-e4c6a390.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.852Z","timestamp":1784816206852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-e4c6a390.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-37a9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14249,"size_decoded":4733,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14248)","md5":"085021039cce9ea59f84a21ac94e89db","sha1":"97e837e7cd72eb2d5c891a703aae91e690745455","sha256":"1bbad59bae9192c089303954ef4234774ba8e0c3e85479b61c751f3cdbfc3c83","sha512":"7ea916e28da06d8497ae9582bea9e4108ce62e09dc64a46c8391bfc4b1363e386b85bdd231df957f911bc5024cb7ad7ddc51a65e3cfbbc657be56a9ca1218405","ssdeep":"384:+ldG9gtzcgP/XuZdZA/0CvXiWOFcudWfO/ARl5SVxemWEobpdJQcCUxR26c+Z:+ldGaui/o1UXfq1dWfOZipdJQcCqjp","tlshash":"7d52b955f8069a3df5b7e0116498002077393fea500d49f2b4bdaf5a2353ef8b79da18","first_seen":"2026-07-23T14:17:23.960485Z","last_seen":"2026-07-23T14:41:15.075585Z","times_seen":6,"resource_available":true,"data":null}},"time_used":943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":943,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/BTC.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.308Z","timestamp":1784816212308,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/BTC.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /YuArdpOPUkGSrgXnkF6QRN+KXM6s34e0SM/z9g6orrZHhX8EtO0ERpgA9TpFPC5NWclPGbm2bvOTRPMk/AWusxSaM/ekiQW\r\nx-amz-request-id: FCR80K4KYAM630V1\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:40:16 GMT\r\nETag: \"66a88a80de5eed33ed8583255445b6c4\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 9454\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9454,"size_decoded":9921,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"66a88a80de5eed33ed8583255445b6c4","sha1":"6d934c7f34286a0344dfbfa63c9ae12b34b5812a","sha256":"39d2790e598859909bf6cb1ed16377e3b220f7e8f2152ca733f70f28abb969b5","sha512":"4c621d0562ae0ecf2be57889fdc0710f9a7baef55514ce3d32f990359e6d2366dbe2c0fe41ab800d5840ea33da5c2d5aaa0fe513274ab58111008e6779e6abf9","ssdeep":"192:dItEpiWFaNPITJaSaLLg+1bslrPN8dUWCspKo8GtRlUV1QQRwD:9GHlvgTpNbcKo8GtRlUVWZD","tlshash":"b412bf52bb7469abfd7223332a2f355f990619d60895b0405c6b8fb31dc3da9f11730a","first_seen":"2025-04-01T12:02:22.596262Z","last_seen":"2026-07-23T14:41:15.091827Z","times_seen":538,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":-1,"dns":14,"connect":262,"send":0,"wait":296,"receive":0,"ssl":541},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-18c31f0c.css","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.871Z","timestamp":1784816206871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-18c31f0c.css HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-2919\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10521,"size_decoded":2675,"mime_type":"text/css","magic":"ASCII text, with very long lines (10520)","md5":"c5695105eb301c4f3d11027cccddf237","sha1":"742da8f94b68ea8f625a7db577344abd8f984116","sha256":"18c31f0c0c8f9845fed191e380bb9ce16845f70741b6300e54aa8be2226eb390","sha512":"ede737413ede7421a8366916b19e2142a5c1e23ebcaa0006fb7ea3709b8ae78a86efe22aafbedf042510cbba7b4be5930b3eb948b42e7f052ff09b38b7877240","ssdeep":"96:/4B1aJyGCJqj/EjWXMp5mXUVM2tL0a5OwKvr62rCEoE04d88ZL9kaq8e:/q1MCJMwPYvWab0I88ZL9kaq","tlshash":"04226528f7a42739ac7bd166afc44ecce10cb911ea93ded4e95795220cd72e31a3054c","first_seen":"2026-07-23T14:17:23.962516Z","last_seen":"2026-07-23T14:41:15.096209Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/BNB.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.317Z","timestamp":1784816212317,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/BNB.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 8T8TsTfmxEyh9C9opqgRVQ1fExtDqJeDOXIxsk8eg9UjCGv3wEvu30R1nCaqIC9eRK4AbAQG0XbYaCOvGFL952zhIN+yKQ8+\r\nx-amz-request-id: FCRATWDWFJC6BH5X\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:40:13 GMT\r\nETag: \"8c4132019f6809ff9c2a835b35af1856\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 16906\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":16906,"size_decoded":17374,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8c4132019f6809ff9c2a835b35af1856","sha1":"5a4964b666058590af8d4a7f73524e9d1f5d6cf5","sha256":"c8f109417aa3e33fa63a791dac00beed96d3e8bc452ffab61587e006603c18d5","sha512":"69aaaa16119febfa23b15cdfad197fb0130e4d4170a26a2eb430f9dc2dea913d004fdc71701bce2870085787983f25f929c36fcc89847484407cbff09c07e673","ssdeep":"384:QYbovmuoWjwje4x/W9D7EcA9Ez2UWQNe3Dqk7jz71yOsFO3jSVNvGpY:QDajj/g7EcA9gbXNe3Okv319sM3+f3","tlshash":"4c72d1f917026917d38b4a1571370a3b069693aacd082d210cf83c56365283fa7cfaeb","first_seen":"2026-01-28T05:19:21.280953Z","last_seen":"2026-07-23T14:41:15.092729Z","times_seen":109,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":-1,"dns":6,"connect":267,"send":0,"wait":294,"receive":269,"ssl":535},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/platform/dev/logo.png","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.337Z","timestamp":1784816212337,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /platform/dev/logo.png HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Jul 2026 09:14:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5de705-bbe6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48102,"size_decoded":48578,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"7b6e744b40f5e7bd1c409a5551b2f397","sha1":"9effb7501d1f28ce2f2220d0b1dfd9a1eb992150","sha256":"f51460814f39c320b343860b9ca8c8146f7bbf036e43ab2e5119a4516def3638","sha512":"84f03fd85d3aecfa9ed5d6dca1e13ae1597c154e649f7a9a1658f143ef714339f55247e9cea3afc58622e9354e944d48595866e6cefdf8e1d0cbd35fc18eb1ff","ssdeep":"768:D0e9ske4m6+h5Q5VBYH5X46zffQzXHeynmfFRq8Lys4RGLQhmO6bZALUt:QeqIV+h+VBYH5X5YTe7fRD58m/f","tlshash":"65230247bee19391363919fd1703f450eb22e45584b5cd41a297ae8562c75d82cf3f0d","first_seen":"2026-07-17T15:53:10.159803Z","last_seen":"2026-07-23T14:41:15.084538Z","times_seen":8,"resource_available":false,"data":null}},"time_used":4099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4099,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/66675831125a422eb8fd32e620df5114.jpg?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.819Z","timestamp":1784816212819,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/66675831125a422eb8fd32e620df5114.jpg?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: gWHZtqlckuxIWo+0wlRHwAPrbHTXS2PmAx+HOcqz1eLAh6h8nxCqJSgcD4hTdAQgLloKO9ZDCaRKdi82RTsVoO+TmjS6IQE6\r\nx-amz-request-id: BA34MDZNWFMPNSWD\r\nDate: Thu, 23 Jul 2026 14:16:55 GMT\r\nLast-Modified: Sun, 28 Jun 2026 10:33:34 GMT\r\nETag: \"2564d548f2ccb5ca5228787e3af055fb\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 138807\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":138807,"size_decoded":139250,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"2564d548f2ccb5ca5228787e3af055fb","sha1":"807ddd5e1d0a61be1dce5fcf86c338d3c0e8230e","sha256":"ee40d3f875f2c77184e3130e93cd65fc09a92d32a327bd4fc7f95e56fca563f1","sha512":"d20c6965848067f70fd17249023733e4ea0f0ec30037f7065fc143b6850b9bf8358e4c5d4f0e29d623e00368e6539c54de2a98222996b342fc03e8e445d4ef3c","ssdeep":"3072:vdU9HxPlz3mIViqSdrHuL/nX2ebLH2z0+S4+xi/C:vyNVZWIUqSdu7hWzA4+iC","tlshash":"f6d3129ca50097c0e24c26be05931fcad6f5fe70caa5e3a5755b9a474c684b3fa22483","first_seen":"2026-07-17T15:53:10.170077Z","last_seen":"2026-07-23T14:41:15.080076Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1979,"timings":{"blocked":1428,"dns":0,"connect":0,"send":0,"wait":283,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/dk.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.293Z","timestamp":1784816212293,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/dk.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: IU2H5yjGnXl5io69xQaWBDMNpELs9+EI9cX1yeRMyjom+BiM0jMeTNObeZXu2ZWSoUgxPotfiU3skBpe2EFUmFqOh6UfdsJq\r\nx-amz-request-id: FCR5ZMC4BEMGKKM8\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:51 GMT\r\nETag: \"05b98b9c4a8bcbc570ebe0321b7e2587\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 4279\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4279,"size_decoded":4694,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"05b98b9c4a8bcbc570ebe0321b7e2587","sha1":"4e731c3c825b7b05756141cb0357520e77460ee7","sha256":"a0d738139d2256d45cad027e1651abdf2da0d3ddcc3b78454e59f22251339797","sha512":"7ed30be8701cfe9ed5fbd94a521b9fe0c759837f461040a48b8396cc611d8fbc21fee2aadabc66053114baf3fb09ca3f662969157fee4b9ca65e9d647e4412b5","ssdeep":"96:HITll6gulBLhru+rY05vZK+WUO2c8iIsQxq2OnQhEUxSsiw3:HITlBuf5YJ+55RJxq2YQNSsp","tlshash":"05917d4e19c08e64d6585273f2690f80f9a1b380b29dbb02c7d1d73e1178b489ab3a12","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-23T14:41:15.091036Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":-1,"dns":0,"connect":273,"send":0,"wait":301,"receive":0,"ssl":540},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/common/type/defi_activity_type","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.318Z","timestamp":1784816212318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":635,"size_decoded":1042,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-23T14:38:00.430459Z","times_seen":781,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/zc.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.330Z","timestamp":1784816212330,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/zc.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QkKMcH3NQhF89e1Eq/9BVgxM2PULnWOMl8WRPu13YEZfzo60aDNtaWTXoUMGybYPtTnT71q//FIeok2lgxsIDZKtEeK2W+Vc\r\nx-amz-request-id: FCR200XCQZTNBCBY\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:59 GMT\r\nETag: \"8f302f24c56d9bf9c98b0f6d120d5517\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1676\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1676,"size_decoded":2091,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"8f302f24c56d9bf9c98b0f6d120d5517","sha1":"b37c1ab75d328c973a120065d28f74e08e1f8817","sha256":"dbc80363508498ff1ead388ba6ad2b49e39a6bf752ed8db2f1ce2ae40d7a4661","sha512":"bd17dae4685a8bb67bf2bfbbf01687afe81beabcea083553f939753f2e9301a79921072321fa625004790e8095bb0c5c65f0f77fd06b2616e537039b881ea6e8","ssdeep":"","tlshash":"c331d68cf541bc8291d4e60315e3d93386071794a9c8b5c6eccf802798ba5b8819e9c3","first_seen":"2024-12-28T13:26:39.049222Z","last_seen":"2026-07-23T14:41:15.051383Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1578,"timings":{"blocked":1296,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.311Z","timestamp":1784816212311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2635,"size_decoded":1327,"mime_type":"application/json","magic":"JSON text data","md5":"f410e6af8a21bfecf062cc7764537cd8","sha1":"129078d69a29de0c8f93d1d2de4d61efd215b184","sha256":"6e369eeba68ff4faa6e5ab0b8c767385e15c899257e2da3e22a859358e2b3c82","sha512":"7358f83453b1410e14dbb6913dcd56e8b339117ffc1e5d468a68da958ed37f0a27d53b08b672d1c5a2c8ac0336e0148d080c538d0227f00ea57970f45b253753","ssdeep":"","tlshash":"6d51784f0978de79090959cb28c8fccde29e1687e6a18d348766cf9d41f25bb1b1f504","first_seen":"2026-07-17T15:53:10.169088Z","last_seen":"2026-07-23T14:38:00.406107Z","times_seen":6,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/4e7dd77929134356bfc628d532ef6fb7.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.320Z","timestamp":1784816212320,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/4e7dd77929134356bfc628d532ef6fb7.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: iGASYmhjkZmKlDJLw5a0eOl84UsCTkZ1xptREgSVerv+PNTElmOiybOYXytR+JOiaGKG5A65Lq4zzvri9fO7w9Ygu9YuOlXh\r\nx-amz-request-id: SYQ7B8J5GMZD53NC\r\nDate: Thu, 23 Jul 2026 14:16:53 GMT\r\nLast-Modified: Sun, 28 Jun 2026 08:39:40 GMT\r\nETag: \"0e600158e55f0cbdf1f8b4bdde5ff55f\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 557970\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":557970,"size_decoded":558413,"mime_type":"image/png","magic":"PNG image data, 567 x 631, 8-bit/color RGBA, non-interlaced","md5":"0e600158e55f0cbdf1f8b4bdde5ff55f","sha1":"85363834ad997f847b3170bc82171fbbdc412c51","sha256":"c77ec5eee2f64acd1c4f5196cc3c8597485a4e9e568e5c4dade0e917ecf40ccd","sha512":"56e1975001e882ad095e2b0e7e6d5e4111e3761dd82b253061c8ac84a171d0cbf979e1b61e236e184d2f2cd0e6acede234c8f0cc9010ccc523c964e637043886","ssdeep":"12288:Bi1UBUn86XhE6kED6rNLGdrd49bboqY7tm92QzP5d3+:QO+HXK6J39d49bZY7tc2QzPL+","tlshash":"f2c423872413c37edacc9715c2e873a9b20db05cd6736282e2d539e96e470e76e1894f","first_seen":"2026-07-17T15:53:10.157905Z","last_seen":"2026-07-23T14:41:15.078762Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1904,"timings":{"blocked":-1,"dns":4,"connect":265,"send":0,"wait":293,"receive":1067,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/TRX.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.324Z","timestamp":1784816212324,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/TRX.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: UBp/HgXSHjpChkKPJaZZOC/5wfhzfeHLcfXsCXeBrcKlFP1OjSQRS/t3lbBennUeWxrKvCRKqiShnM8K4tdAsJVWXfjh5+5m\r\nx-amz-request-id: FCR9WFKA4BNX39RF\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:41:09 GMT\r\nETag: \"3f8910df7b05bb5798d55311c4e40893\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 18612\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18612,"size_decoded":19080,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced","md5":"3f8910df7b05bb5798d55311c4e40893","sha1":"395d7549f95ac866daa0a5e8f32c47a8d6b7786e","sha256":"622d4e8faa5d5adf2d6ec0eb4f57bf671f29bf0e738e9109314f752eb6885a10","sha512":"ec9f69ea379764ea351eec099d1326204622767d443e4a5cdeed536194fd8c11bbbde896fe82f3ee2d3af9b6bd08b52bb1286709f2485e21127eaa07ed165fea","ssdeep":"384:DFW4B4y1369BGQe+U9HcqwD4+u2yTCj1mCRnpWYN5WJGOo33:p38vyhwUGyS1xn0AtOo33","tlshash":"ad82e1e97ca19172bfcc514f0305da7b6c3ad252540bf076722f8fa9454fb852cac958","first_seen":"2026-06-20T13:11:13.868531Z","last_seen":"2026-07-23T14:41:15.09366Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1683,"timings":{"blocked":1389,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/common/getMt5Amount?coin=xau","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:47.873Z","timestamp":1784816207873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:47 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":817,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-e91d1a17.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.854Z","timestamp":1784816206854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-e91d1a17.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-13e8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5096,"size_decoded":2708,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5089)","md5":"1088f8b0271afdaa4e2ff1878e482e61","sha1":"07c73c1a49af477e61388c21e7b666b524b7b74f","sha256":"86dd55002252eae8b2009a00e8d4fd824a8cade5b619487c9ea299f2fafa7152","sha512":"5ee40ad06b102590a9c284962c59d2a556ea424cb3bb58488ed0b2c3dc46f124e543d130b6b21f2e739b264a834399512aee56445ea2a3feeee185ab19363483","ssdeep":"96:0BX7+uEnYcdIqD+w/M7pNfYsvboyUzxKMVKEr5y3hv0c3iZQ4Sbjo:YX7+uoYcaqiw8fY8bUxZ31Chv5vTo","tlshash":"4db1e94ef802c57daaa3a40548580420354d7ffba1888cf6f2bddc0977b8e79d790766","first_seen":"2026-07-23T14:17:23.974615Z","last_seen":"2026-07-23T14:41:15.065457Z","times_seen":6,"resource_available":true,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/en-4cc71bfa.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:48.794Z","timestamp":1784816208794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/en-4cc71bfa.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-a1b6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41398,"size_decoded":13040,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41375)","md5":"1db3221d423aa7340a6e7b5d9ae57bb3","sha1":"25e432b748b50352996f1e124c4117b072e34397","sha256":"5de1b28e8f732a1c983d7a06375fbea021d3946553608b60585e9f7c5fa929d3","sha512":"f82ccde94260bc56d921d5060c9651135d95809eb2f2381a67e0dd843e43073c702f91e62b0f17c735da2e3a59cc81e370f50a5631a1f5345917f71af1655b94","ssdeep":"768:+GtZcEw/o7rKOrWAsi5AW26r5aA1FRoP6+is3G9k8mwO6fpk7aO5t8O:iponKOyAY6rbFRhs3Wk95tX","tlshash":"2903d7897e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd53e2b67a363b34","first_seen":"2026-07-17T15:53:10.160756Z","last_seen":"2026-07-23T14:41:15.087761Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2949,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/jy.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.329Z","timestamp":1784816212329,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/jy.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mQLsWyABXSXT7qzXUBKX6DeZandkCB7bpHSfrz6l1W9U3+NygDVGr1k4M9XaJcto/TuMKlB66EIiDtwUi4ZRNW1ATlkoszAy\r\nx-amz-request-id: FCRC46YX9KKSKEA4\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:56 GMT\r\nETag: \"ad6b83d68fe77a766048fde4ec309c52\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 2069\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2069,"size_decoded":2484,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"ad6b83d68fe77a766048fde4ec309c52","sha1":"ca6f434c8954e5650a5129eceb6519561d3c31bb","sha256":"b5a31db9be184ba26012c0c84e9534ef14865919b20bb022196eed2f13b588b8","sha512":"d2f3fdf7e061f9d1e9085787c820a3635a95e53edbf2af81ad1b852e6aa3a9fa09e77a7146418a31557636e1e28026576c251c7076ddada197ea6d21b9b88600","ssdeep":"","tlshash":"6d41fa4dfd02e8509145d65235e1d1b37f6a8d90e9c1a5a1e8dec46a24301f8c1be2eb","first_seen":"2024-12-28T13:26:38.986858Z","last_seen":"2026-07-23T14:41:15.07061Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":1082,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/common/getAllSetting","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.333Z","timestamp":1784816212333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":827,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-a4b76261.css","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:39.100Z","timestamp":1784816199100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-a4b76261.css HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-4a81c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":305180,"size_decoded":66755,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"4e532fdbc2d5e7f28ad93a8c4fc14f43","sha1":"10fe29fcfdebec41ca64204355dcd2d5c390ad0c","sha256":"a4b76261434a3d80346d18e7af7cafdd31164acbb8df0b2f232a95feeb50e08c","sha512":"4e55dd7aac07eecc5b3311c377b1c48b1bc9a9218812504c30ac8b42cd656e41f4dcb6a58c62c261912909ae30c1a780cd3e2d67f34c144701a2dad4614352c4","ssdeep":"6144:ndB/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05Ty:dB/54NZ8w71ZACkFDS3vyf58rBeV05Ty","tlshash":"e654c6a9a590117c6f27aa7597ce9ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2026-07-17T15:53:10.131641Z","last_seen":"2026-07-23T14:41:15.057761Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/tg.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.298Z","timestamp":1784816212298,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/tg.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: AbPUtLgymD7Tqz+C4zIDH/D+pWuONXj3fY6UiDy+nrKZfY96wnPkfvKzv5soyrm0FuZ1DHd9Z9Jf9muOp5Hb94Z7t8PEznDF\r\nx-amz-request-id: FCRBNH6ZV8MV0G9B\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:42 GMT\r\nETag: \"4c8e3ee1d174e3df521490f8b848d565\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 5201\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5201,"size_decoded":5616,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"4c8e3ee1d174e3df521490f8b848d565","sha1":"159a33721aeaeba134e1c5efc41850ec04b9e657","sha256":"c536e17f1a76ca7626d496abd6a11bee05e566d13335bfdd8f31140f18fed4ea","sha512":"240d9d7da8aee475a3665559787d439f446f6bd9d634953dd34cad2be6d05e845777d9da2c57703221143c6cf78ddb9444d5507ec2e287dd495a00ba905950ca","ssdeep":"96:pSNBCPZKM+gn7Rxz6Wy3l5EV2nTSyat41b2cr7jMLHyEZ2Kz:pSN8PZKM+gVlYl5EQla2DMDZ","tlshash":"1ab18e261a19917e5f944a60c7cb00a0dc4c55e8f3392c5c92e59de2605bb1faeba33b","first_seen":"2024-12-28T13:26:38.990168Z","last_seen":"2026-07-23T14:41:15.095405Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1106,"timings":{"blocked":-1,"dns":0,"connect":268,"send":0,"wait":299,"receive":0,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-18d77505.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.862Z","timestamp":1784816206862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-18d77505.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 596\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\netag: \"6a60f0d0-254\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":596,"size_decoded":1045,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (595)","md5":"a84eec3bebda359293d583b6113dfbdf","sha1":"97527dacd11bc30edc567e243a2ca1604d1a2517","sha256":"be008d9a4fae737c138d1572b372395e1f25ed324bdacaebe7f9c8b5ec0baa95","sha512":"2e05ceafc44f013bc78df11f7a7e327b8f09de29ce89781ff3419e95322aa0ae25e8436248ad25693c262ac31258445f8ec6f1dc6fb2138c132b4f20984d9426","ssdeep":"","tlshash":"35f0a29f79ba40731a734ca8d2031c25a62c2f1d3a60d5e15746593086748f5d65d624","first_seen":"2026-07-23T14:17:23.980288Z","last_seen":"2026-07-23T14:41:15.097771Z","times_seen":6,"resource_available":true,"data":null}},"time_used":933,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":933,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/LTC.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.316Z","timestamp":1784816212316,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/LTC.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: mms9UoKJga09TJ363GjckKiQ8wFl2daAZTCCvFimynL8kXxVVJbNZJV1k8wI2bSTXCNCJ9Z2KxImuxXES86B0HuQ67IKQevy\r\nx-amz-request-id: FCRAMC8C8MHEDHRG\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:40:50 GMT\r\nETag: \"7dfe657fc78ddaa9bbf4b180da6eda9c\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 5120\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5120,"size_decoded":5587,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"7dfe657fc78ddaa9bbf4b180da6eda9c","sha1":"ba56d2cbdb8ec2452e1d9a5e550c277c91dc21df","sha256":"ef3cea3547a0881c98e8d1f1fbe8ef6158365b6cac122ff659a726c0cff19518","sha512":"257a98d541b179e5b9e57a34e01f9d81d1786982690557f8336bc87b07fea94538dcde1c57f134664222774bf4fa3885276d3c17d2b47b23bdaddcc790fc09b7","ssdeep":"96:V50NeZ9yU9UKd9PTq7iFxW4LHiosNR7QAN7u+tGiO4drIkfx34:VqsYwd9OGFxpLHqX7z9tGiO4Bfx34","tlshash":"7fb18ec63f647e5a4304a1808a127d6785f1bd6f1a5cd0a1d713abdad4e8693ad46044","first_seen":"2024-08-02T10:43:53Z","last_seen":"2026-07-23T14:41:15.045841Z","times_seen":233,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":7,"connect":270,"send":0,"wait":293,"receive":0,"ssl":534},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/sy.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.327Z","timestamp":1784816212327,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/sy.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: U55tZJv0RblFa7J/w+dhi0VQwjx1RHIUD0nUZGKUMkUvX32A1Q/rg1IQbY3al+w9gBcn2mekDYGpVOjwPp6zYTpwvxWrTHry\r\nx-amz-request-id: FCR6K3JKJD89NR19\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:56 GMT\r\nETag: \"64455360fda69a119c06c748ab341f9c\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1469\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1469,"size_decoded":1884,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"64455360fda69a119c06c748ab341f9c","sha1":"4d6b1d845b5b4ec7b353d460db1035cbb4ef983d","sha256":"8c39872a53eb59793a13182fbd53298629feca13b698432d5e49f652dd36ec47","sha512":"0a2d3b261bffde09076e631839b959982bb97e9649bef7da167215a725ade34717b74335bf64426a369d99364b9eb2948bb95abf1fe62df97fe5909cc21d210a","ssdeep":"","tlshash":"ae31a78cfa615840a284e99225fe5167c2234dc0edd0f4a5fdcfd98e18600f685ba9cb","first_seen":"2024-07-26T23:59:09Z","last_seen":"2026-07-23T14:41:15.078127Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1364,"timings":{"blocked":1069,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/common/getAllSetting","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.315Z","timestamp":1784816212315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12741,"size_decoded":3640,"mime_type":"application/json","magic":"JSON text data","md5":"b6f02ed78c4492af2fe301ddd989da80","sha1":"7cd2584fea0e602d880f0d6ceacf8adcced0f4e3","sha256":"0f133fe336910250b0183ade030eab513c2173a1168b23fc7d311f4b205e5f53","sha512":"9cf7f17d2e6102c1720e1d714b4e6bc70b186cfc92094a6ffe82db5a5fac10b738dc4ab51ce0aca384abb3d7e29a496244902d872cf9ce62a8769489119fb769","ssdeep":"192:NMZlLaWSgyj+06+Iq3uc2hZKx3wPjNa+iZNEGAZwOHeYqpizpmze2s435s7qXCJt:duF8S2PEMC+ISW","tlshash":"c44236893ad8cc7d57c717d1c4e6ba8dfadc2873e498ac4ae276ef1cc592630540e11a","first_seen":"2026-07-23T14:17:23.983541Z","last_seen":"2026-07-23T14:38:00.406703Z","times_seen":4,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/BLZ.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.325Z","timestamp":1784816212325,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/BLZ.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: RDFubsNJ4uTZBhGSoLhvyW6GFE72R1NB7a21flGXpw2pjiAlBKcXgLnh86eOoNiKg/uYrILoPW3plbIPkrUkjjpXf/7RXgTp\r\nx-amz-request-id: BA334H6H08WRQ9Z2\r\nDate: Thu, 23 Jul 2026 14:16:55 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:40:11 GMT\r\nETag: \"431c4d160feef49b3dc7f0eb302f6228\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 30176\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":30176,"size_decoded":30644,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"431c4d160feef49b3dc7f0eb302f6228","sha1":"fb5dde90c31128ae1f3e9312f992ea3e7e8dbd18","sha256":"88ab4755a40230ee3c926288637f80925174ab616c23cd01dd5617f19a269f56","sha512":"ca2f6d9de2e5349ee4c6ad52333cc007bf1af2fbe9a49fa8d3c5764f93ff0293846f94dfe3eca5634c09adb0dcb0882deeaccb101cca077f8c6adfddf17e3a32","ssdeep":"768:OxGj0WHcMoNx4fGEZkMDnC8yh8pe2bHEoos:OIbHcMW6kAnl9BEoV","tlshash":"c3d2e165ba5c89885b27d92aee1b910f474431fb270047f80fa6920fffd035a2d9c257","first_seen":"2026-07-23T14:17:23.984682Z","last_seen":"2026-07-23T14:41:15.086127Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2142,"timings":{"blocked":1576,"dns":0,"connect":0,"send":0,"wait":295,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/common/type/defi_activity_type","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.334Z","timestamp":1784816212334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":827,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T17:51:01.341379Z","times_seen":17481265,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/5b46eef9f14e4d1c8a70b37bf1814ea7.jpg?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.818Z","timestamp":1784816212818,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/5b46eef9f14e4d1c8a70b37bf1814ea7.jpg?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vBPijLIPM5KkUlit9ak4sq8FuiXDRJmrGce066zXWBvSK/m0bqCmT3fuQ2Uhec2A11r8fYkMcq00137wwZG5ZuhWrh6ZD0Vb\r\nx-amz-request-id: BA3E6N5AQ69WA3ZS\r\nDate: Thu, 23 Jul 2026 14:16:55 GMT\r\nLast-Modified: Sun, 28 Jun 2026 10:19:41 GMT\r\nETag: \"8bb4428c7fcd1b0ea81cc8896844b836\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 163309\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":163309,"size_decoded":163752,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 970x561, components 3","md5":"8bb4428c7fcd1b0ea81cc8896844b836","sha1":"33d021540c55cc629f16e133bcc54ee755026c24","sha256":"bc52be96ecbfaae262b738b6fcdd083e7a2140cfd4931fade36d2c2adcb95e62","sha512":"821dda787e2035ed114ebfff3b66eceb8b871fa826cbce17cccdf5b9a18832764e74c83b8e9a96f1541ac7fde45cb394cc83583e0282a4c7aa663e147a35d19a","ssdeep":"3072:mCgHgCMTkc4+GbQfVHeqrMjzCAmYNg+vKBvtXqWM1cx1RmhRIAQ/jN4:NmA6AcqYOApB4a0J4","tlshash":"d3f312a39c19938f1a3f44b024c630d1594a447cab852e5a61be9b57ef10df6d3b3a0f","first_seen":"2026-07-17T15:53:10.185177Z","last_seen":"2026-07-23T14:41:15.089424Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1699,"timings":{"blocked":1406,"dns":0,"connect":0,"send":0,"wait":288,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/charting_library/charting_library.min.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:39.094Z","timestamp":1784816199094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 28 Aug 2024 14:08:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66cf2f74-2a6b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":3635,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-23T14:41:15.072132Z","times_seen":1251,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/resource/fonts/Arial.ttf","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.570Z","timestamp":1784816206570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusxz.top/assets/index-a4b76261.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 28 Aug 2024 14:08:52 GMT\r\netag: \"66cf2f74-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":1047469,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-23T14:41:15.058903Z","times_seen":2139,"resource_available":false,"data":null}},"time_used":12961,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":242,"receive":12719,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/index-2fc9e0ce.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.856Z","timestamp":1784816206856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/index-2fc9e0ce.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 772\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\netag: \"6a60f0d0-304\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":772,"size_decoded":1221,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (771)","md5":"f518d7b5f89c5922151c1b510339eb97","sha1":"bb6e4f87c8c2857b84f5875fa414055ab26ba418","sha256":"22223f3530daaa6a7228c4d8e6e22fac382a8db7a852320ef55a58750a758509","sha512":"28e0f9193b72fa4b2996d717f4864c6630074665acb172aee28d5daaab283911eb38793084ef334022338824d1c50039b9a682d5918402cc92aeac1f96735d53","ssdeep":"","tlshash":"b401d0f9fc0dcebb1f620a4002913501140a1fddfa2419f198977e661be4950d7de72d","first_seen":"2026-07-17T15:53:10.201125Z","last_seen":"2026-07-23T14:41:15.094524Z","times_seen":8,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.ap-southeast-1.amazonaws.com/echo2.0/echo/zywk.png?2.0.1784738000224","fqdn":"s3.ap-southeast-1.amazonaws.com","domain":"s3.ap-southeast-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.147.44","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.285Z","timestamp":1784816212285,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /echo2.0/echo/zywk.png?2.0.1784738000224 HTTP/1.1\r\nHost: s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: B0NYuH600WJ3XgOe1zurzrNN76u41A9muolxGqfwWhc6cpKIewDPY5rV02uef7BLkusrl5/lSkJAUc/yjsmh09WEpmPYv168\r\nx-amz-request-id: FCR4CZWDY092J5X9\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Tue, 24 Dec 2024 08:29:54 GMT\r\nETag: \"7dc3cab2c5a154ac53ed31fbc116c45b\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 4244\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4244,"size_decoded":4659,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"7dc3cab2c5a154ac53ed31fbc116c45b","sha1":"7205c9b5af4bc0820cd6d1bc1a2ccc9748565d9d","sha256":"6ec41c9f9debd149c634eb7ebf13f578fe22555592c8cfdf91887add56a3b3ab","sha512":"db041a9ee1bedc14d28077947494f0d38ae8cf23a1f5f2779cb62cca817d1d875b4c9b46978ccca6d26503ae306a239ec22db05022be487c5f1c1b0e6ec526f6","ssdeep":"96:P/7anLWhow+OzQBmYs+QNG4GqSwZAx47pqO4DPRqYC4WVmnc:P/enqhEBFs+QNGOSw847p6D5e","tlshash":"85918e594c43c13088d6823bbd869872f98d6b5dd22b7a451a7d3453e3acbbc9311362","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-23T14:41:15.080731Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":-1,"dns":0,"connect":259,"send":0,"wait":284,"receive":0,"ssl":521},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/spothq/cryptocurrency-icons@master/128/color/matic.png?2.0.1784738000224","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.319Z","timestamp":1784816212319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/spothq/cryptocurrency-icons@master/128/color/matic.png?2.0.1784738000224 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"17e5-CXM+tEhBU8SdsHvA9Lg4iZRbij0\"\r\naccept-ranges: bytes\r\nage: 38415\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\nx-served-by: cache-fra-eddf8230151-FRA, cache-bma-essb1270024-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6117\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6117,"size_decoded":6842,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"2b7938b1654a5c4987d9e7f07e692dc3","sha1":"09733eb4484153c49db07bc0f4b83889945b8a3d","sha256":"488e64ba671bc0fed4613e2806137850a88405565f18acb97a3f6b2772a92f3e","sha512":"414384753fe67bd0ba097f075083ff70cc4a7fc843f639a5bf2b7a3312eb1441ca428f76392436cbe18fecdb3f35a79d2d9499b9c09524fd42b6cb8d19c19014","ssdeep":"96:hvuB2ey4BD80kiBfPC7vj4T7oMwYIunVzTPoL443JGpNnRki6aeafY61bXEeZYIJ:M2CF80ki3Kvj4T0MwYTSLd3mNnRkbaeG","tlshash":"d0c1bf512076387385039ed33b8c71629807c977569eb0cccf6df0798ee787a1855509","first_seen":"2026-01-08T09:34:18.794514Z","last_seen":"2026-07-23T14:41:15.052751Z","times_seen":16,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":31,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/SOL.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.321Z","timestamp":1784816212321,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/SOL.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: rxLeTuhQ8XJqzZvVvMmCXFB9eXPfMPlRQpaXcZGWmt4XryNLGER4Dw45yomc5Mdx43+2AB937A6V4O0wAKwDmvrdeZCHmcmo\r\nx-amz-request-id: FCRAT53E2KBRSJJ7\r\nDate: Thu, 23 Jul 2026 14:16:54 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:41:07 GMT\r\nETag: \"ec92adf95ac2cc376c921d18c1518e02\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 15753\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15753,"size_decoded":16221,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"ec92adf95ac2cc376c921d18c1518e02","sha1":"b56f9e5278a9a22aa6cce8b069302fa8ea7a9061","sha256":"225eee32e447c82796f9393d3cd749655bfac3df0e65ad5eae2227d148a9a952","sha512":"20460f991d76596493f2607574d9f232c74bee0825ca09181639aae5a9b3a2eb776998198a79cdb215292b16a41e6a3af170a0f42a170610ab0ef5e936dc4f8a","ssdeep":"384:YdjcBy2DhVdNiy2G7+xTFM3BYE7dFIb/ghiwpTYWddvAkpgmF:XXh7v7DRYE7EborYUvAkpgmF","tlshash":"0062bea8427792e6afd43672749ac90f6480bd5d8702e83e4b088c23d163cdc0d94adb","first_seen":"2025-04-01T12:02:22.484074Z","last_seen":"2026-07-23T14:41:15.0551Z","times_seen":110,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":1092,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/platform/dev/logo_144.png?2.0.1784738000224","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:42.458Z","timestamp":1784816202458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1784738000224 HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 20 Jul 2026 09:14:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5de705-781b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30747,"size_decoded":31218,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGB, non-interlaced","md5":"6f3a06a52f2ce15733a92bf828aec78d","sha1":"003dc5cf13a7bbe7f93814236f1dc1b777b010de","sha256":"652390b84cf24d8082c9199f6f97dcc61b10fced54d6b431074162993938717e","sha512":"ce7461a6356c5e340ca138c7930e0ec57e0a17b69507dbc589822b3a9a02d7d68a672e1813c83c3329e3ea4a74658284e2fad0bdfda2785cb0c815875e591dec","ssdeep":"768:ktdwddjprUy5ztNOulfZZnCejpzUuVT2vdLWPj:ktGddjdUaNbfZZnCe1WvdLWPj","tlshash":"f0d2f10bc9fec839d482ec6f152c5530ee62353f6da78ec570a7998d66b7a144e2831c","first_seen":"2026-07-17T15:53:10.14552Z","last_seen":"2026-07-23T14:41:15.082943Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/assets/currencyItem-f1916cd2.js","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:46.867Z","timestamp":1784816206867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /assets/currencyItem-f1916cd2.js HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 16:33:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a60f0d0-a57\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2647,"size_decoded":1511,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2646)","md5":"8711852e42b388348cd4f86e81014eda","sha1":"2025785242592a0637608505d5f1be79bd8bf00b","sha256":"896de4bcf968b76f49dab8088a6da6596b4855f0cf867bebcc2bd2ed4b3c89c4","sha512":"cbb6c1907a017571efc57e8c3276a83581a32ed593247ec90baf9756e6e816d389d317e4243c0587cbaf05b9849db65618373e1a4bed840282784c715df85ee5","ssdeep":"","tlshash":"7351e1d4430665b5d37521e1e4886c1866bc7fdaf250c9def7f8889477628e84320d39","first_seen":"2026-07-23T14:17:23.992777Z","last_seen":"2026-07-23T14:41:15.067565Z","times_seen":6,"resource_available":true,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":928,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusxz.top/resource/svg/light/mengbanzu13.svg?2.0.1784738000224","fqdn":"nexusxz.top","domain":"nexusxz.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.305Z","timestamp":1784816212305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexcoinus.top","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 09:01:50 GMT","end":"Sun, 18 Oct 2026 09:01:49 GMT"},"fingerprint":{"sha1":"7D:E0:F2:5A:4F:C5:2F:BA:82:86:8E:64:B3:8C:FE:71:E9:4A:6B:DC","sha256":"B3:EB:A3:09:6B:BA:A9:66:26:26:37:99:D2:1A:80:EA:73:CC:70:8B:5A:BF:85:38:BE:90:74:5A:F1:D3:17:33"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1784738000224 HTTP/1.1\r\nHost: nexusxz.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 28 Aug 2024 14:08:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66cf2f74-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1202,"size_decoded":1062,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-07-23T14:41:15.074527Z","times_seen":917,"resource_available":false,"data":null}},"time_used":4131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"nexusxz.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mksjdfer.top/api/notice/list?key=ROLL_NOTICE","fqdn":"mksjdfer.top","domain":"mksjdfer.top","tld":"top"},"ip":{"addr":"45.135.237.216","port":443,"asn":140683,"as":"Starbow Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.312Z","timestamp":1784816212312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mksjdfer.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 08:12:52 GMT","end":"Sun, 18 Oct 2026 08:12:51 GMT"},"fingerprint":{"sha1":"36:C6:26:C9:36:0F:B8:72:2D:16:CD:B1:1F:66:DD:19:65:FC:B3:32","sha256":"21:B1:EA:51:05:F5:91:1B:F5:41:6D:89:EA:B3:30:CB:DD:F6:02:60:5C:03:F2:85:EA:54:0B:B5:61:3E:2E:C8"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: mksjdfer.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: en\r\nlang: en\r\nOrigin: https://nexusxz.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 23 Jul 2026 14:16:52 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://nexusxz.top\r\naccess-control-expose-headers: Authorization, Content-Type, Accept, Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Lang, X-Requested-With\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":712,"size_decoded":1207,"mime_type":"application/json","magic":"JSON text data","md5":"7e9fc2ee6be957f45c3e0ea8b7396117","sha1":"185f204a6bfec18885e30d1d275079e7af5732c9","sha256":"b995c100e49b031bbe9749334457476806a75a1d4aa819b2046ab77cc08741d1","sha512":"8a0bd6e55cf26c2bedd307528e774f289e007985c51089b9b302feeeefaeefd0694d23b5bd1daf7400e43b7f01fc89cf968f6f28b653c4c2f4815add252aee77","ssdeep":"","tlshash":"e601970a16389fb65902108756dcbccc913f5203e6618d3c5b6e8f2c02e1ab90f2b649","first_seen":"2026-07-17T15:53:10.173825Z","last_seen":"2026-07-23T14:38:00.4222Z","times_seen":6,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/LEVER.png?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:52.326Z","timestamp":1784816212326,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/LEVER.png?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: wi1/4sv74a6YGzPBjArZUzmzuqYR3AJ/vzv+qgLsO8HZssjGUA0vvKV0kBg8xaoakfdDdzs9Uax/1jZvuSkKVZrzES2BRRSo\r\nx-amz-request-id: BA30RXSR476E88WZ\r\nDate: Thu, 23 Jul 2026 14:16:55 GMT\r\nLast-Modified: Sat, 27 Jun 2026 17:40:48 GMT\r\nETag: \"e1beb1d242c4a302460206292610db2b\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1744\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1744,"size_decoded":2211,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e1beb1d242c4a302460206292610db2b","sha1":"0b898a843a196c477a5105bd5f256d8a5c3de95b","sha256":"abce2146b933235224cc59ead0b94b4bc57180e72f562a0ce813087407be5128","sha512":"8663916c339811140fee49b5b4c943bf3c45359d22e9613bc277e1b8bbfcd0e2c32a3e0478f82bc751be64efeed4844e548d4bbecc64e454153f5526661d0456","ssdeep":"","tlshash":"47310817faed0d28033613a79c3709789a61bbe7a85a982561688c73971c9c33608393","first_seen":"2026-07-23T14:17:23.996132Z","last_seen":"2026-07-23T14:41:15.082196Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1974,"timings":{"blocked":1683,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"view-server.s3.ap-southeast-1.amazonaws.com/upload/c4338cd96be840ccb24a9b9c07901db5.jpeg?2.0.1784738000224","fqdn":"view-server.s3.ap-southeast-1.amazonaws.com","domain":"view-server.s3.ap-southeast-1.amazonaws.com","tld":"s3.ap-southeast-1.amazonaws.com"},"ip":{"addr":"3.5.149.242","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusxz.top/","date":"2026-07-23T14:16:55.925Z","timestamp":1784816215925,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-southeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 15 May 2026 00:00:00 GMT","end":"Sat, 28 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:ED:4C:FA:17:A3:FF:D7:16:5F:54:D5:FF:28:CF:82:E4:9C:AF:45","sha256":"94:15:FB:89:B7:74:F7:CF:CC:7F:BD:2D:E2:0C:0D:93:BF:C1:F8:6E:16:D7:91:D6:41:68:C1:29:20:FD:07:62"}}},"request":{"raw":"GET /upload/c4338cd96be840ccb24a9b9c07901db5.jpeg?2.0.1784738000224 HTTP/1.1\r\nHost: view-server.s3.ap-southeast-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qkFTpvd9AzzMPF3TXTkUcsGB+e/RdJPbMt2/AROzzEAL8wKtu5pWgogzB7elJBaaKNbH41IpsoG6/HyxI7YOQIGetXLkr+jS\r\nx-amz-request-id: JQSHASZ9TM57EQWJ\r\nDate: Thu, 23 Jul 2026 14:16:57 GMT\r\nLast-Modified: Sun, 28 Jun 2026 10:24:30 GMT\r\nETag: \"3cbafd10b3947f2a3f30a088855d4671\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 175844\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":175844,"size_decoded":176287,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1], baseline, precision 8, 1200x800, components 3","md5":"3cbafd10b3947f2a3f30a088855d4671","sha1":"2f691e0ec9ceb304ae589ba0da79538a129af92b","sha256":"f853dbae41b52ed89bd9b2d6a43917b7df22bcedf3ed64fc1729abf3fcd5aa8e","sha512":"c8223afbb88849e382cf5062851489189730e4891037cdb642cda230b6ee904b9916316b9f117c2a7ec1bc14ab9633b468aeccedf3b8600a9d2c9647eaaa523c","ssdeep":"3072:b97tx8ubRMfkwg0cUlXTPyt2vLBq2D9U2/3udybwh1S4zB4sVdlJa2eqjNXZaRz:jx8yMfkKnlXjyKLB/BU2vudqMgssPqje","tlshash":"cd0423dc5e47d94a5cb1453689a273c4d904ab9ca0308f25b1c2b36ba7fd6b22b83357","first_seen":"2026-07-17T15:53:10.171129Z","last_seen":"2026-07-23T14:41:15.090221Z","times_seen":8,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
