{"report_id":"a81b6568-7f7b-4f2c-920a-fa2e4eb3ae05","version":6,"status":"done","tags":[],"date":"2025-09-28T21:46:39Z","url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"title":"Buy \u0026 Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Nexion Key"},"submit":{"url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":0,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-02T21:46:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.chatway.app","ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-21","domain_rank":788542,"first_seen":"2023-09-16T12:41:10Z","last_seen":"2025-09-21T23:42:52.889295Z","alert_count":0,"request_count":2,"received_data":82814,"sent_data":850,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":6,"received_data":52404,"sent_data":3230,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.cloudflare.com","ip":{"addr":"104.16.124.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":26817,"first_seen":"2012-05-22T13:19:15Z","last_seen":"2025-09-21T22:13:10.395733Z","alert_count":0,"request_count":1,"received_data":601,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-21T22:12:58.000435Z","alert_count":0,"request_count":1,"received_data":104035,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nexionkey.com","ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2025-09-28T21:46:41.24298Z","last_seen":"2025-09-28T21:46:41.24298Z","alert_count":37,"request_count":38,"received_data":4259176,"sent_data":17652,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Chatway","description":"Chatway is a live chat tool for websites, designed to facilitate customer engagement through real-time conversations.","website":"https://chatway.app","common_platform_enumeration":"","icon":"Chatway.svg","categories":["Live chat"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}]},{"fqdn":"prod-api.chatway.app","ip":{"addr":"172.67.72.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-21","domain_rank":745850,"first_seen":"2023-12-16T03:20:22Z","last_seen":"2025-09-23T06:40:46.167082Z","alert_count":0,"request_count":2,"received_data":19999,"sent_data":1291,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widget.chatway.app","ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-21","domain_rank":772505,"first_seen":"2023-09-16T12:41:11Z","last_seen":"2025-09-21T23:42:52.93363Z","alert_count":0,"request_count":14,"received_data":1222845,"sent_data":6952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"files-cdn.chatway.app","ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-21","domain_rank":1629904,"first_seen":"2024-04-25T02:10:45Z","last_seen":"2025-09-22T08:03:34.935652Z","alert_count":0,"request_count":2,"received_data":7878,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":4,"received_data":26652,"sent_data":1929,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.binance.com","ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2025-09-22T01:44:17.019575Z","alert_count":0,"request_count":13,"received_data":61547,"sent_data":6166,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-09-21T22:13:28.585612Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexionkey.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-03T11:12:52.035643Z","times_seen":2314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d450bea2ae4b035e95c4bf621486c13","sha1":"3567c232074d9d2f96b7d4ce489a61c2d933a606","sha256":"d6fb2166159f96b4e113a78266e6b2591ff8a549d647ae58e0c743b5832db5fd","sha512":"8738ca7fc79b4ff1fb451c923c83c58eb9db9c399cb63e1c61c3b340a678d7069744c42f2ea78406b459a56e924e36c8df341ef1f7d45cf7969772015e8eb69f","ssdeep":"","tlshash":"c5e02b8b370f4c71549ba6872f7f7305f843213b99a1a421295d6204cf61e17a304cd0","size":295,"data":"","first_seen":"2025-06-19T20:02:29.562271Z","last_seen":"2026-06-05T15:12:51.796161Z","times_seen":339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf2d6add836b79af8754a438e13c9b0d","sha1":"39154d7a57dde0559a640098c246f87b6c1936c4","sha256":"fb763efdedad293cff0e2c2819b6a120996e5cfc9f482ef2d71a0fa4f125acc6","sha512":"b42ec4c430d2a112c0327b810d3417f26248bfed68deff49d3704a1179bc434bc2ceb846d1b8c3d71d1c237db1a2ff94764a2b919ef3f541fca41ee0cd941d10","ssdeep":"","tlshash":"493122adc1b1163501b3b16b13af996d293114a7b184c93d3eafdfc01fa5490a4a2eda","size":1584,"data":"","first_seen":"2025-06-23T06:39:13.041176Z","last_seen":"2026-04-14T13:37:51.795083Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/socket-io-bTi66-QE.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"66e2055675b5f9ba4a4859b957bbca64","sha1":"a20d7b0fc4feff1aa11fff546104a3204e75494a","sha256":"ebedb053e4570d0cd4ad727580b68bd15d38353f420f36f4e555ea037d20e029","sha512":"12703e716b8bdad4be20432e6ad67d378312c141f63bbeddbc2494a05349c99ed0d24200ce369a2fc50789236568581abc5c52de3b0bc600762e0db4de3b28f2","ssdeep":"768:4zMhtTwsaSn5FFUlffRdMFyRsTngw0IQ2ovp7czzUjEQphySPrY9nZh8bT5Vto/e:VXn11TgBIcv1c/Ubr+C","tlshash":"cff2f9c8b2a0946683e2a1a290750203f33954557409869cbb2ceef7ed7deca7173f75","size":37176,"data":"","first_seen":"2025-09-19T09:30:35.425382Z","last_seen":"2025-12-18T10:54:25.530934Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-chunks-BYd2Hzn0.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"eb49242cd339aa37a4cb9e0af427a9ff","sha1":"c859954d51c4a7181e368022dd9411a44b89598f","sha256":"e181f7349fe639058386888ea32954ba2fb0ba7078bcfe77f7cf589d1027f04b","sha512":"71b0ff343a85565692855a20d960ac59e9bc3a4bb122273538a86a03f33ddd7b5738be17d23e858c496cd243e33dbddad1d66123957aefe1e7a6a730dbe711fc","ssdeep":"768:180GJQN2Ee3JhEovnDbqTbWLBrsfcwn13wunX3nO0j1tqD9M5pEftKFBrwik9PK5:/WE/n2D+khQ500Wj6sCFQCjARc5","tlshash":"fc7307e83182b57253fa09e6007b0406f3292d56384ed898f1adaddf3d7640591bbfad","size":76840,"data":"","first_seen":"2025-09-19T09:30:35.472732Z","last_seen":"2025-11-06T05:40:50.182778Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/floating-vue-NX6caY_s.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4bb12c7a6b49c06ea688f1c9a3cfd2db","sha1":"b5b09f9d82ad0b2c4bd4dcbfe8cc74bc4ecfdde6","sha256":"dbc05aef460412e122f20cb4dc78af2880dc9eba75f45a153e4647d77b10294a","sha512":"507e3449921245c47048705759d5340af50a89e7f8d82f49b32bffdbf74f16a967ac4473afccc94ff8c5c1bf5fc0ffcd8c9d9dc68c2ac7273895fb55016ac6fc","ssdeep":"768:nUz+7n+eTC43ULScUbGyf2J8hrfLdZAY5+mn3Wh8usqu0+fbmzZqflPOrorRtfEQ:UzvfQnAY5PcP+pB","tlshash":"5613fabb7184f13313de95b6503a0609b3261798b40f545cb2fc9bed28b6d14626afbc","size":42661,"data":"","first_seen":"2025-09-19T09:30:35.338988Z","last_seen":"2025-11-06T05:40:50.144353Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/js/main.js?v=3","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8129e7a736eb7ab1bb4ee9f4d919fdc","sha1":"268925c35b15f7b723c0c4ff913610f7c22bbd12","sha256":"0fa2bfa1e742acff380af5b6ea26a4cddf165f7313c43d64cec77e2de97ab7a9","sha512":"5efb0f92dbb776182f79fa6ca42a0f22e44b753fc11a335a4de33b46b1a23c6d47bd682063b010144cd32e00a5e7bdbfba5db45a0049339b7a0db0388da2318e","ssdeep":"192:GVH2ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxg4S7/:GXKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"64928298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","size":21249,"data":"","first_seen":"2025-06-19T20:02:29.443643Z","last_seen":"2026-08-01T13:57:27.093084Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/landings/1/js/chart.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddb8b0991b8bb5d93eba1b0d2a64cffa","sha1":"31298e4d3433c99cb3cf44b72009f9bfa0342c0d","sha256":"0e2326c6868072bec1592760c6729043caeea2960a2b46cee6a2192aac6abff0","sha512":"6784496b7e8a97ce2e9e87afcf7c32674b850cc8fb95f6b102cfa18aa5d779971783fae37584da7c05f13ff84a4aa5bc5b0a37bf07e0d95fdd92e1f97ca3b66f","ssdeep":"6144:HycGOv7siC5tTzhSGmeab2OLK8rTleMR5LTDmNV0Fz42HRcXj2c:S8siC5pzhSGmeab2OLp9eMR5LTDm/0Ru","tlshash":"f214f5d53342b12282d256d6583a050ae3366648354789acf2bc5ddf3c6a98b71fff38","size":205222,"data":"","first_seen":"2023-08-25T08:23:08Z","last_seen":"2026-08-03T03:11:39.113923Z","times_seen":454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b87edb6602e578f6f20114faff531865","sha1":"a877e6faeda21b434fda4ce241c1040a29305d04","sha256":"b5492ccb7d366199bc53c7b0323db848f368ed3c85be52fb2f4881308f8b9b10","sha512":"5b85b8a35a63ad6f6cc89f59e1ae5eaa1c9794e051e260dd1269cf2eadc4a3323f5b3c8cd70e7557362e45a14408565937d90f8554ebc7ba762ab92e83747a65","ssdeep":"","tlshash":"f201446e2ca3f09632fa316d8ba752692332060b3581d905ba4dc5002fe9d5f6c56a8e","size":688,"data":"","first_seen":"2025-06-23T06:39:13.043384Z","last_seen":"2026-03-22T14:44:26.347393Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/index-BamluPQq.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f86cb2fc8ae0c74a9e84a8fdc33c2b6a","sha1":"24ff8d4d83f6ac6cbdfd000af191a5f6eae41311","sha256":"1c68d1c4ae02bae063fd500113ff2e2105595fb0943fbebc396543170be2ef5f","sha512":"2d91f133111b5bab357ee095b526946b3b1ebfacf62ef3727d03e34633d86ea6642e1db8d1bb04b0cac089b1931777e1e13fc21a40dbea363424e440feafee40","ssdeep":"6144:LBWECwn1Kvp/RrV7V1jB8MZMFbpgQk+Bcahu+BoHa4CC5KpGlw:9j15MsFRJglw","tlshash":"b5b46be631d1b73ba2333710981b604abb6c5da5dc48c498f6ebccde2960c54617ef68","size":507040,"data":"","first_seen":"2025-09-26T21:17:11.039854Z","last_seen":"2025-10-03T04:06:45.576596Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/js/toastr.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","size":24854,"data":"","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-03T06:44:20.962034Z","times_seen":966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/jquery-3.7.1.min.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-03T15:01:58.687823Z","times_seen":183661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe8462dc5678e9f3091b64ec50361a58","sha1":"506e741fb2c2e2dc13ce89456af416e3b78c5823","sha256":"a2a2a71a1bfc6599fe99d8a524df0aca331deb4d217df2fd755aaa0fc2acde36","sha512":"2c039d3c82a63c59bb3cf427f0205599ccce4c78fcd376e982871a894ebc2073b25e959ac5768bcb392d80efd6f78a99dfed7755c5a2912aca889ad8b4b89048","ssdeep":"","tlshash":"4c01991b1c5360fe22ea203ee73b2a0a22152a872141c0533d9c80282fd08242fadbcd","size":714,"data":"","first_seen":"2025-06-22T10:42:51.78747Z","last_seen":"2026-06-05T15:12:51.797265Z","times_seen":374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf2d6add836b79af8754a438e13c9b0d","sha1":"39154d7a57dde0559a640098c246f87b6c1936c4","sha256":"fb763efdedad293cff0e2c2819b6a120996e5cfc9f482ef2d71a0fa4f125acc6","sha512":"b42ec4c430d2a112c0327b810d3417f26248bfed68deff49d3704a1179bc434bc2ceb846d1b8c3d71d1c237db1a2ff94764a2b919ef3f541fca41ee0cd941d10","ssdeep":"","tlshash":"493122adc1b1163501b3b16b13af996d293114a7b184c93d3eafdfc01fa5490a4a2eda","size":1584,"data":"","first_seen":"2025-06-23T06:39:13.041176Z","last_seen":"2026-04-14T13:37:51.795083Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/js/noti.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","size":12111,"data":"","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-08-01T13:57:27.122056Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-03T06:44:44.755392Z","times_seen":337634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-3-linkify-DlOWVUQi.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b48b3ea3c57b51c99db5dcc2bd654614","sha1":"da56becba8d73a9c65dc0a17acd3ba8ebb63d5b1","sha256":"e3f90028af93d5570e2912f867ebe60a0c05aa9a3449d561102f8a6ad37eaf6f","sha512":"044a23444d4daa3781b44cbdc797b01554fe652bc4cacdb341c0a4234176f468109b4a716e08beadfaff98952bd76acd23ea597bba57d5b27c38ca4d2da69bb6","ssdeep":"768:u27wR9FY7HCua/sF+sw4nlOnib6w2JTk7vPh8H9OiQagMw47Tz1ETEW9r:TwR3CCua6DsniF2JTMqHwioV","tlshash":"c7532ad8f6c2e079475350238caf0304507c9964fe85c52db9b8e4e734a995bb1bfab8","size":65337,"data":"","first_seen":"2025-09-19T09:30:35.305849Z","last_seen":"2025-11-11T08:53:54.510295Z","times_seen":276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c63dc6d6f1af93f9e76fb305c2249ae8","sha1":"1705e547ec2dd91c5257e7facdbdf387de151210","sha256":"54abdb9ed194620f66b746182e2db89dbeec1e5ffac06d99afcd4168eb5b6c5d","sha512":"282b78431dccb1c2ac8f372294439fe03bea9c5ba446c4f90292ba4b4ef88b4175a58350ea73b96bcf28540653c9f44fd2c5ddb887ae656bd48ac9a2ae4ab30e","ssdeep":"192:SnfBOxKyxdyxCyU4yuOxKyxdyxCyU4ylD2nQmVC:SVQm8","tlshash":"33e11168c6f9092d941b75fa4a9f4209a430a11b3d58aeed7d1db3109f8603de0f6f85","size":7233,"data":"","first_seen":"2025-06-23T06:39:13.045743Z","last_seen":"2026-04-14T13:37:51.798615Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.chatway.app/widget.js?id=D6TLgwFrVsa4","fqdn":"cdn.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb98a6fac97ea8a960bf5564d644bccc","sha1":"bbf8a37f9e1a0184dfdef96021a7afec4b1722c0","sha256":"1c2130b3d2629e931aa689b54391896d1766378347060bfb0024def30db97e54","sha512":"9809ace220f67d70f26bf8fc95e9a3a0cea270b17d2871d2b112d7024f4340b846c79540efa374ad86dfcdac4aaecb071badad0b19559a9c08b2c06a2e97c25f","ssdeep":"1536:GdVxkqiB//dYjb4J5K3mlpvqkBmnGpI93o:gkF/dYCnnqkEGpIe","tlshash":"ee531ab07166183556eb48cda469b7002b115c9eb485cc78fc3cdcaabb95cc68237fb9","size":65281,"data":"","first_seen":"2025-09-24T05:37:31.074167Z","last_seen":"2025-10-16T19:15:05.538429Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/markdown-it/13.0.1/markdown-it.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c312733bbc9b162af28c64c8991b3ba","sha1":"9e7644adf7f90a5afd8d60cf2887134ef08fb72e","sha256":"84dca58da83a8220ac8efff22a6c4af3f55e1f3bcc0ef739bbc033991be6d412","sha512":"4987c35183e0e71b29b06e8e3a95d4dfae86f1266c7473a1aa4fe271dad827613f58a6713f1cdeeddd870f70325e94fb536d8f679cbbe31469a99e80d9b27e91","ssdeep":"1536:+WA83I94l3mQiB9JGv18Px6/HpGmqD4JIz3BXUT+3VNb3xzsp4tEHDT8er3Q4A:+WAL6l/KP2H8zcOFLN36C2DQugb","tlshash":"5ba30b5562dfdcab229030d82c7f290da9fe4a42440cc428ffed91eb19a5993315bf76","size":103012,"data":"","first_seen":"2023-03-09T23:28:50Z","last_seen":"2026-08-02T07:02:28.560927Z","times_seen":1650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/library-chunks-1-CbCrXAn7.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f3c36bc4f26318e30af8527a4307e319","sha1":"3cbd90f404b7205d10d3f649684d9690de8d808b","sha256":"f57741f6931441d3a2024c07084397093ba88d57c7b3434e568fad84ffcd13ce","sha512":"7ec4477c03b27922de40dd9975829674c5b16a7ef316b2fc23525ead63d765322565aebee04586f94764252b78997500176c9aabba1af3f2e55bd561fbeeaa19","ssdeep":"768:li1q3dEbzRCSf5z92W5GZV7iLE4Vox/NeL7qx483ptHUzilPEHHhs8wIsADq/pon:6V+wXHXe7bnDUj","tlshash":"210318d976d1b47203ea14f8406b0902f33a9a19744d84e4b16cdceb3db610a96bbf7d","size":40114,"data":"","first_seen":"2025-09-19T09:30:35.481483Z","last_seen":"2025-10-27T23:50:55.194897Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexionkey.com/s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVmUiA8.ttf","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWub2bVmUiA8.ttf HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 08 Sep 2025 18:08:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25527\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42272,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"6a2e5ddae7d047db6318689010a788ab","sha1":"90a1eae9adcc03a6026fa81f0b804d59972e24b8","sha256":"6b469cef903a5fa8b793d100d77fe34fe61e8c27d5d4485694b0b0c1848709db","sha512":"23622461ef77bdf99587083cb0bb2319f816c4793e5acfd5b5fbb5f7ab87778a0f405fe03904191b9d30c403ded6484d0ce13e1d738a71b45c98609efd10c438","ssdeep":"768:H04YE1mhbRBH7D3N7N6G3WKL+ysTzbeG/D9IcwDlmcT/jpa7Ud7Yx1PE:H04EbDFr3WKL+1feGGDlmQ/M7U21M","tlshash":"26135e04f332ab99c9316379c452e3d57ae9b815b787132f204eb77b4c4616ceda86c8","first_seen":"2025-01-16T07:24:35.02037Z","last_seen":"2026-08-01T09:49:00.419709Z","times_seen":639,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/coins/DOGE.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/coins/DOGE.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 Aug 2025 08:56:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2808\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-02T14:27:27.418081Z","times_seen":997,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prod-api.chatway.app/api/v2/pixel/widgets?user_identifier=D6TLgwFrVsa4\u0026include[]=agents\u0026include[]=faqs\u0026ip=81.95.81.194\u0026is_mobile=0\u0026loc=NO\u0026channel=\u0026domain=nexionkey.com","fqdn":"prod-api.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"172.67.72.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"OPTIONS /api/v2/pixel/widgets?user_identifier=D6TLgwFrVsa4\u0026include[]=agents\u0026include[]=faqs\u0026ip=81.95.81.194\u0026is_mobile=0\u0026loc=NO\u0026channel=\u0026domain=nexionkey.com HTTP/1.1\r\nHost: prod-api.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXC%2B2NXYRHFIMQeUN1CTcr4E8yMKrG4SlHT4PJ7W0rfu3yP%2B00B6%2FXFyAnIutPJ9Qt%2Fy6wtly%2F0XyJLn1RP%2FkDx%2FhmTsMCX7799yovAejdTxq24%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98666ed3086ab1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T15:28:01.656173Z","times_seen":17692056,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":14,"dns":4,"connect":1,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/index-CYCHdxCr.css","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/index-CYCHdxCr.css HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2B%2Bov97EtcR9a8MIx0ZlI5%2FLJeNI8DX9ca98MhnV7XZLwLtnjyC%2FKM4D6LliwLwF7CWqG3Xg26rwDLrY%2Bgwa4fR%2Fx0CA1skZ0ZJKYgzUlowe\"}]}\r\nage: 6162\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-2c2f4\"\r\ncontent-encoding: br\r\ncf-ray: 98666ed94b6049c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180980,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"43f852882cb136fcf9db6bcf5d8c3e85","sha1":"50ee6b116232a31515f9bc26edf3c7c4aba86f29","sha256":"f099cf2f8c257204ce32bffe8c4172ec49d928858047a29cd56eee8df26b64c2","sha512":"20e3e1458c48533adcd9fde328f98bb2b4bf3c9bb83c4addbfa16bb4bddc420a4f6dc0c111c248f3a9dfcbe35b0abc3532f6ff7b77cbd9f010ddacb899ba4d44","ssdeep":"1536:+44CCBG+WOnWxcS6lXN7OcOxUyw+gBRNsXUB/MF+JCyxKckQYJ9xFpafH:+44fBG+fic3PObL3+R2QEF+JCokQaG","tlshash":"b8043a62b6923028f223c56260a06ffc733b9547d6120f7db5177f7c87c61e329a1a69","first_seen":"2025-09-26T21:17:11.03041Z","last_seen":"2025-10-08T03:47:06.156414Z","times_seen":58,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-chunks-BYd2Hzn0.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/vue-chunks-BYd2Hzn0.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-BamluPQq.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QUXM2f%2BG3IhwRhb9Jag3wVASSVGGhIyzPTDPZXvStb3V40S6Aicw4aLeSKQil%2BJJ3bXdNlj0svfwX8NpfKdxEamtjYLgvAjCXKjjBDgyRd3s\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-12c28\"\r\ncontent-encoding: br\r\ncf-ray: 98666ed99bee49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76840,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (41422)","md5":"eb49242cd339aa37a4cb9e0af427a9ff","sha1":"c859954d51c4a7181e368022dd9411a44b89598f","sha256":"e181f7349fe639058386888ea32954ba2fb0ba7078bcfe77f7cf589d1027f04b","sha512":"71b0ff343a85565692855a20d960ac59e9bc3a4bb122273538a86a03f33ddd7b5738be17d23e858c496cd243e33dbddad1d66123957aefe1e7a6a730dbe711fc","ssdeep":"768:180GJQN2Ee3JhEovnDbqTbWLBrsfcwn13wunX3nO0j1tqD9M5pEftKFBrwik9PK5:/WE/n2D+khQ500Wj6sCFQCjARc5","tlshash":"fc7307e83182b57253fa09e6007b0406f3292d56384ed898f1adaddf3d7640591bbfad","first_seen":"2025-09-19T09:30:35.472732Z","last_seen":"2025-11-06T05:40:50.182778Z","times_seen":253,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:01:34 GMT\r\nexpires: Thu, 24 Sep 2026 00:01:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 423887\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-03T15:30:57.854998Z","times_seen":387010,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":42,"dns":0,"connect":15,"send":0,"wait":14,"receive":2,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/header/market-screener.svg","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/header/market-screener.svg HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 17 Jul 2025 20:38:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 573\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7944e8dbae0aef3ac357be974b744b67","sha1":"a154d9e8e513fc83a6f3b47635700b8201fa7e02","sha256":"2e9a44184816bc53deff748c7962e0fef1cc59bbe5927d230632c4666431151d","sha512":"7570fb14fc8d97102954be3c07c5504a7d7e2f91211b2933124ea73e88b4163196b80b50df58709ea7a5313eac71b67e352084a6442456067741354050ad6ea2","ssdeep":"","tlshash":"0331d1d850dac9f8a964c74516fc9f95796238fb3260059cfebc642737824a8309ced7","first_seen":"2025-06-23T06:39:12.953108Z","last_seen":"2026-03-03T17:48:17.60416Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":617,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmUiA8.ttf","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWuYjalmUiA8.ttf HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 08 Sep 2025 18:08:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25620\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42348,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"2a030f087f6f6dbf5142b6dcf4a68353","sha1":"75fc14b68b32cd526f2dd152dc0761453e423093","sha256":"4d2f5dbd0dff69cb61151a478ac75f9a25621af4dd1982dc885f08dbe4ddb680","sha512":"e904793bf421aabf6c9f8feb821808fb0dc5aed1950d112f03e2f7ca7d887c5e691d4395e5d37dadf8a74f2e41e1068ef47bde1c4d2e41b757e010356bbd33d2","ssdeep":"768:0U4YUrrGKHD3N7N1ZsrWKLx2oQbJvcpD6wSQtifAdOPVWskj2aV0pbQ4:0U4vTHDFByWKL6xcpwhfAdOtWvj29pV","tlshash":"cc134c08f3736bddd93263be8952a3d66af5b8447797831f204de73e8c850189cb0699","first_seen":"2025-09-09T23:22:59.357314Z","last_seen":"2026-07-06T15:13:32.179752Z","times_seen":448,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files-cdn.chatway.app/OEoZBF5gYjEgl9xPsxPx90k1p1G4EtSaVhVxIm6FKEXcjIki_88x88.png","fqdn":"files-cdn.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:23.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /OEoZBF5gYjEgl9xPsxPx90k1p1G4EtSaVhVxIm6FKEXcjIki_88x88.png HTTP/1.1\r\nHost: files-cdn.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 3040\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Sep 2025 18:13:54 GMT\r\netag: \"7650a125d29d20ed5e3ddd5bd8bedc61\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 1dgoeXV3qGD3YyosgXH9Km2xbL_WPSwmG4n9VNuSyGT57fz3mD-mYQ==\r\nage: 1\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rli6R865ieqkkpKp5Z2YP7hpzBa5ibwqmL6dPc5k9H5ZP9%2B%2BWGfwGFjJGOAimD2s9sB0PP1WrhnDlvIr1RoGlPe5mGyZ5k23szIPHO5uNHgLmvR6\"}]}\r\ncf-ray: 98666ee6cd1c49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"7650a125d29d20ed5e3ddd5bd8bedc61","sha1":"d3906494ca168aefdc25fc6566079052ca7e504d","sha256":"569468c8e36807fe71d71eb30b016ba0479245d19aba831d59778adcaefc747c","sha512":"b2bf5dada5e121073a4103e6e8aa5f212b34547d0f94b5deaf9e80ade8c68f111a1eba7e8d6ebe1e64462cb04b56d0b5ad650a68b51cdea6a17bd8d2b6b01e6e","ssdeep":"","tlshash":"f7513c9af1e050848ef347614f5620d4ec297fe3e078998de666844d3c936e91922c6a","first_seen":"2025-09-28T21:46:46.783583Z","last_seen":"2025-09-28T21:46:46.783583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/coins/ETH.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/coins/ETH.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 Aug 2025 08:56:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1100\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-02T14:27:27.372047Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/jquery-3.7.1.min.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29739\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-03T15:01:58.687823Z","times_seen":183661,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/landings/1/img/icons/arrow-up-right.svg","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/landings/1/img/icons/arrow-up-right.svg HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 05 Aug 2025 12:32:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 341\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":675,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"91dba8e7c95ac43bf11585cf66c7c46b","sha1":"aec41df0ef7de8320adc2a9f6ec535e427cb6615","sha256":"e2c30a599853972a5a762cd7134f153fff603bd5db9acf5c1ea146c9016df300","sha512":"b2db57f50b0c28d6f1799b0db5fa888ac88377e9a8a8cfa7167d30897a279d4d085c5a88917d8dfae538b416c6ee5fd36910032d0d32f69bfbe82edffef60eff","ssdeep":"","tlshash":"cc017bfbc3d88684d90ebb367623b955225e21ffb9048dd9c150236257b09f28c41ca6","first_seen":"2025-06-23T06:39:13.015388Z","last_seen":"2026-03-22T14:44:26.287986Z","times_seen":38,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"prod-api.chatway.app/api/v2/pixel/widgets?user_identifier=D6TLgwFrVsa4\u0026include[]=agents\u0026include[]=faqs\u0026ip=81.95.81.194\u0026is_mobile=0\u0026loc=NO\u0026channel=\u0026domain=nexionkey.com","fqdn":"prod-api.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"172.67.72.165","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:20.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /api/v2/pixel/widgets?user_identifier=D6TLgwFrVsa4\u0026include[]=agents\u0026include[]=faqs\u0026ip=81.95.81.194\u0026is_mobile=0\u0026loc=NO\u0026channel=\u0026domain=nexionkey.com HTTP/1.1\r\nHost: prod-api.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2By8kBMyCkibf7r%2BvssfxhdWDh1ii6oVK%2BJ8AgGufgi%2BakED28qbVrpQTLaMvy4e43K88jx6PCcyO5F%2FoiokVmd0T1LjyvexbO1t4f0zF%2B4F6dQ%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98666ed48b3bb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18617,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f7b9c386fc93279cb73226bbd4aa6ed1","sha1":"28a832dddefd50b597c4ccb7091e2a5a76d9a19b","sha256":"70dfef3171081011cd8850a317ae08401298a4872cf65b61c6f839c438e11d79","sha512":"780a599469a16ccccbbfe15ce6d209a49cc98cecf621659d961b54a7abbe676269b2686b2d4d460cd07deeb5434e2125c1c992ffb134d3505a8985dfca4f93e5","ssdeep":"384:s8q7Pv5hjXLQ131Ogy1y6laSEJfIf89mt350P5:sP7Pv5hjXLQuH+fzx","tlshash":"f58289c485640cfe4e670747908e7f02726ea7afe480ad564dacd72c53ac19b6233b5b","first_seen":"2025-09-28T21:46:46.789035Z","last_seen":"2025-09-28T21:46:46.789035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Sep 2025 21:46:21 GMT\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2390,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"99732590118df209cfff721d0d4bbb19","sha1":"6ae6323f3fcd8085a9bb38292b65972b92f1881a","sha256":"7d306f38fb5378f3a004776b9c2436cb31e864dfe47674b4f8334673ae5a2bb9","sha512":"c84f3706d491bf8ee62c595caba3533a9078dd5e474ea291b8d683d50eed716f19379ceb6007ac78ad50a53f64faa65f776310029514b363a4f9126c5aa3f1a5","ssdeep":"","tlshash":"ae419bd1087be114ab831cc123ce7d37ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T06:17:11.832934Z","last_seen":"2026-08-03T11:38:39.294791Z","times_seen":4874,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/landings/1/img/icons/arrow-up-square.svg","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/landings/1/img/icons/arrow-up-square.svg HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 21 Aug 2025 08:56:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 449\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":978,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3fec2c1c75604e5719a78d17387ca778","sha1":"5cbf12a1d6689c5ba30a5b4c034049da38586240","sha256":"7b4d5c8f4bf10ead885c99191a9f529736f86eef8fabb24e21d008eee3568be9","sha512":"ab3991068277ce584d2985ba083546f62d06f39c2a1a27d1c81ecd32708296835d3ecaf665eb1c767a9b6a6946d38d5a6fc160daf8423f60cd4eaff65d4e515c","ssdeep":"","tlshash":"f11110f492e440cce0071b20f0703c71d12ebeb8de985becc174aad8e124ad1e46ccaa","first_seen":"2025-06-25T10:32:28.419326Z","last_seen":"2026-03-03T17:46:00.955688Z","times_seen":38,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:20.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1226\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: dffc8c54-d996-4234-8110-b5c4f52e585e\r\nx-mbx-used-weight: 72\r\nx-mbx-used-weight-1m: 72\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 3vglsHQREeIvrPHiEF8LhsS_1p2N17HI6LRJs2JxgpFJuEw38vd1uw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4021,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c717d0185cc0433fcd627342ae4d54aa","sha1":"8a6f63880c2607eba55b1b86a913a8b32fd19bfc","sha256":"300d881e0356b1dad8eaf0e7af8ca8509e42d5e8a3221ed67c7f1414dfe734c8","sha512":"b9590419c859af3c9ea8cf86c97ab86b683a8f9d2b383d8545f7c894019a6fc0e2369dbcd089bbdfe4a194fb77bb76faa066211245134f5e6cfb290b8d3b7783","ssdeep":"","tlshash":"05811691139483a0fa79490927d5bd652a7b301eeeca1fc08be1e7771ce23720639f16","first_seen":"2025-09-28T21:46:46.79377Z","last_seen":"2025-09-28T21:46:46.79377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/admin_icon_dir/1738415629888.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:21.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /admin_icon_dir/1738415629888.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 18:33:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24699\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b2cb1438cd00cdc97302313232da72b6","sha1":"73b382c1e648a0b61092613b34420f928987c66e","sha256":"69f1d6c45468841334cf3210de499123c2d28570454ab61cce553299750a74c0","sha512":"c7973af5ae236cb9cdf0fe5c00ae512920cd64036fb9c222ff4d926f072b94da16fd317144e7d8e756a1ce09fbc9ca0462c9f293e395223001083fb9cab0eb34","ssdeep":"384:CPegr47v5twTzO4t2eta2R0vH57QxKyFkuOfWTbB2I1Rw8KMLCFdFx9p67u3:Pv5twTzBKZ0xKyquIOM8zLCF5W7I","tlshash":"43b2ad8bee99b25fa559692757a336d6c531940b70082fcf6f4180b44c930caf57ce4e","first_seen":"2025-09-28T21:46:46.796095Z","last_seen":"2025-09-28T21:46:46.796095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:21.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=DOGEUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1219\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: caf7875b-77ea-4e90-8284-0abeebdcd59f\r\nx-mbx-used-weight: 76\r\nx-mbx-used-weight-1m: 76\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: XT9nMfm9FTjQso__2Aa5b2UQvu6czUdc1dJlAiXyqwh_WfFxOF2f3A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4068,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4bdc1d716b96c0e4b83e5a01b0f27944","sha1":"e7dc1f1d9a150c49a39dec8fa77a5f1edb88dff1","sha256":"422aad283949837a51f98ce0e691569251a799934573455b47689a5298b80bec","sha512":"d9ec72e6ffba9b748004283b7b34b85b59c3da6397307b2eb11658d7267cfdbc8b36984b4ec21b1391970b8c41375350da2204dc695dd70718722630bada3cf7","ssdeep":"","tlshash":"01813991175087b1fa7d091d23e5f9665a6a700fadce1fc0c8e9a63318f12fa1b08f55","first_seen":"2025-09-28T21:46:46.798765Z","last_seen":"2025-09-28T21:46:46.798765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:20.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1258\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: a551c1ef-04c4-4730-af77-c418c7c560f6\r\nx-mbx-used-weight: 66\r\nx-mbx-used-weight-1m: 66\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: bx81gHcMvca7vYaaGzOqX-tUpRuuuLSUF8ulX48buJOgCj6gX7ryiQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4095,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3703c0b07b28ca227489756727bea844","sha1":"3e54c2c02ccef6bca7c4c66785205404574c2ab9","sha256":"0b40c86fab7d2c81e28610a328ad67de7ff160c6acf11b34dc5f969d11cb0bed","sha512":"11cf009d3b485ba0933bf3a694b97555b81af41b35d7084c1a881b8c782524fb31427e3625b673b4c04714b48fc20b6c9c08e6da6580feb6042788bdb2d887f0","ssdeep":"","tlshash":"3481f7a5e358c7edfe794d1d2391b9d7096a305aadca1ec0dbd1a73318f22b20608712","first_seen":"2025-09-28T21:46:46.801391Z","last_seen":"2025-09-28T21:46:46.801391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:20.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color= HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=6,cfOrigin;dur=208\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1iJQuTXJKKYhX8GwxTt54X4QHDxZYzZnZa8ELmblLGRGQQb70cieW%2FlMQ0vc3PqbSOSlSrNZWDXEj7jM6%2BwmGguczr022pQChfExRKSzDvWz\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 98666ed7b81849c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1594,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (499)","md5":"7052d9fe42e8ea1f71a94580c43fddb5","sha1":"9097288019da5480dbb0a80210a09067fc689ba0","sha256":"2ece6ae26e1adfb57ceeae664d61004397e1ad47277bcaf76daad9b9d048d426","sha512":"c3896f4e55bb5bcb3483ebd299e0fcdd394b7c11c6edd2466d1d952378e0aee3f9e58c7f0938a453207557221a024b77dd15d1e3cc5616cc47875e342ab237fc","ssdeep":"","tlshash":"2d31330674b0841953201b0979c0fd2cbe97b7bb4549e8a4b1fb60bd8f54fd6860783a","first_seen":"2025-09-26T21:17:10.985945Z","last_seen":"2025-09-30T11:23:24.280968Z","times_seen":28,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/floating-vue-NX6caY_s.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/floating-vue-NX6caY_s.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-BamluPQq.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8S2hisyxQaja1p3VpssHYymkIefh3%2B1HNBXFMRKbEc7x%2FDyducWFefzGqCIQj66EhWjtGKrIPg1OxkJILnoBJMujPF3YdRnE9Yn6A%2FlziiE\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-a6a5\"\r\ncontent-encoding: br\r\ncf-ray: 98666ed9abf549c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42661,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (42660)","md5":"4bb12c7a6b49c06ea688f1c9a3cfd2db","sha1":"b5b09f9d82ad0b2c4bd4dcbfe8cc74bc4ecfdde6","sha256":"dbc05aef460412e122f20cb4dc78af2880dc9eba75f45a153e4647d77b10294a","sha512":"507e3449921245c47048705759d5340af50a89e7f8d82f49b32bffdbf74f16a967ac4473afccc94ff8c5c1bf5fc0ffcd8c9d9dc68c2ac7273895fb55016ac6fc","ssdeep":"768:nUz+7n+eTC43ULScUbGyf2J8hrfLdZAY5+mn3Wh8usqu0+fbmzZqflPOrorRtfEQ:UzvfQnAY5PcP+pB","tlshash":"5613fabb7184f13313de95b6503a0609b3261798b40f545cb2fc9bed28b6d14626afbc","first_seen":"2025-09-19T09:30:35.338988Z","last_seen":"2025-11-06T05:40:50.144353Z","times_seen":253,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/landings/1/img/banner/lg/01.webp","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/landings/1/img/banner/lg/01.webp HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 07 Sep 2025 10:53:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 615654\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":615654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"963ac1c6a0e5bf81c6baff657ad76804","sha1":"d1b300f434d56a68a929a69c31f4384992794d9e","sha256":"02b0c9456e12ee8811e49b62e92255a4730ff62c0ca06bbc5457383ffdb10611","sha512":"81813f9b3a229decd6a64bc83881d13eeb984720eadc92bb30137fa216927c76d45dabf5d8c96b1610fd234b8a24b007a18b17f7d8e944d0ea29a2bc09b0bd08","ssdeep":"6144:t4+A9xK0UvbT2poZLSRF9SeB+yKjlA9j8:t0jK0i6ULS7B+yKjq9g","tlshash":"1fd423259d44d60dd3cdaff28bae0fa03617d96632dec3820431959ee73362e6d1d885","first_seen":"2025-06-25T10:39:15.157223Z","last_seen":"2026-03-03T17:48:17.64057Z","times_seen":38,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1398\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: dffc8c54-d996-4234-8110-b5c4f52e585e\r\nx-mbx-used-weight: 58\r\nx-mbx-used-weight-1m: 58\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Q2-V1yF16U56FH3XKq7ZTQHOqqbfSUzT2svUmC8Qvrgh6_BoWETNnA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4348,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8dfd34e165a765b9869bcb51634c9b59","sha1":"d70d1c7c6fdaee021bfcfca15be839f284c247ae","sha256":"6b7e4b2b4a1f8fe8eda95e06770fdaccf37fa5d2ab60113adaf501a781629428","sha512":"66e4ab745f10a8eb15b234e85627d169e802e5f20bc308766f49047007a8f4e7f0817eff9516c66d3620c756ed0e99a1e822b7f6025343521060b7965be8c3f0","ssdeep":"96:mih9AdcOcBbeWRykwloRvpTF47Dkw+kEN9VYMp6EHigpmCIRskq0R:mih2dcOcpAzuvdFCZ+kEN9VhwEHigpmr","tlshash":"8491b09253888774fd79491d37f1f861656a305aadda1dc045e1e4f748f22728b0cfd2","first_seen":"2025-09-28T21:46:46.805644Z","last_seen":"2025-09-28T21:46:46.805644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/header/market-cap.svg","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/header/market-cap.svg HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 05 Aug 2025 12:32:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 877\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2411,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49053270c47c9a9869651703dfdd2411","sha1":"2ba4ce79a83c2c215546f3ada9b7660c23e39cb7","sha256":"5870f8245f109616d0c0ceac56c7f312a034346ab4fe834bbebdfc0c131550ca","sha512":"cf59c426187a9c16234c2a69564f7b73522ff9aa51fcf785ade5e4ec98133487091e4ead25260a1805215ebecf845af25f7bdcfaad1b2eff9669bfa848c0e2f2","ssdeep":"","tlshash":"504132e80365473e5658ab465db94f45746060d27f62018cf36e3d5bbbc2e9b208cc6a","first_seen":"2025-06-23T06:39:13.035751Z","last_seen":"2026-03-03T17:48:17.568883Z","times_seen":46,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":617,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/js/noti.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/js/noti.js HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 21 Aug 2025 08:56:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1906\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12111,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (344), with CRLF line terminators","md5":"6df3802945529795d74dbf9ac7f7afcd","sha1":"2a5bf6c00baa2869769f629fe74009ba7f14976f","sha256":"da7bfecee787dd36b914c1bcbba8290ca09f5eb63cf65ccd37394a8b9c21985c","sha512":"7aa37dceb01cc94ca3e4c5bb0512f69b7f80ef2a717b12a3c21aa566146655af59f4787868bb3dcd452fff0e7843e048193cd91e0e867af5907299cee7b121cc","ssdeep":"192:Pu2zR+wyioZAP34P+AN7bkaJPLYFdack34PT7rjaR7Fb71SLdqa34P17rjaR7Fb8:moz/ARdJTYD5exFb71SJ4exFboSzVqeO","tlshash":"3742725420ca1922457f63b8da925a5dfb22d20b93072aa13afc46d32ff7c14c2c3b1d","first_seen":"2025-06-22T10:42:51.761799Z","last_seen":"2026-08-01T13:57:27.122056Z","times_seen":290,"resource_available":true,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiA8.ttf","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /s/roboto/v49/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiA8.ttf HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 08 Sep 2025 18:08:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 25181\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42220,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"2e2946d27be0d3d91e36c587bd7b0506","sha1":"19e0367ad9bbc41518bb6b5f78ad4226b8f3402e","sha256":"67a09262294ed5d0783c5f2ab20d9673654c2de3d038704737ebfe9e826ed613","sha512":"be6e903abe9dc06e4ae9ecf2e10413c0cc61aa4c7eb2a919e5ee993dd19565627b2b8e020c108bca09130546aa88bc02b4db401bcffa3b60d06abb0cafa52d95","ssdeep":"768:SO04YsTG/BvD3N7NIqWKLZSLbbW/keXw2FvicDmM1ME819yM1d1hdghu:704OBvDFRWKLeHW/kbCAE8Bhdgk","tlshash":"59134d04e333ab99ca31b3b98953e3d66af9b41463c7432f304db33e5d4216d9da4589","first_seen":"2025-01-09T19:55:13.026046Z","last_seen":"2026-08-01T23:25:07.352399Z","times_seen":13941,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/fonts/inter/Inter-Regular.ttf","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /fonts/inter/Inter-Regular.ttf HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/assets/css/root.css?v=5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 07 Sep 2025 10:53:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 135579\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-08-03T14:00:48.98621Z","times_seen":4398,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":406,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T21:46:17.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sat, 27 Sep 2025 10:01:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18390\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Chatway","description":"Chatway is a live chat tool for websites, designed to facilitate customer engagement through real-time conversations.","website":"https://chatway.app","common_platform_enumeration":"","icon":"Chatway.svg","categories":["Live chat"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Chart.js","description":"Chart.js is an open-source JavaScript library that allows you to draw different types of charts by using the HTML5 canvas element.","website":"https://www.chartjs.org","common_platform_enumeration":"","icon":"Chart.js.svg","categories":["JavaScript graphics"]}],"data":{"size":151459,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1953)","md5":"803af21eaf7fbe35dbbe0028827b521e","sha1":"1694a544ee113a884b983a0cc278dfdc2407e246","sha256":"9bd87a105e5886a4441d5cc2961437ea75ac0ac88d2fa074cb8c4a411d5e3ab0","sha512":"92a344646af838d651dec44a3069607d3ebc470bc0c3fee7c07ac5b2dabce03dfe37db48ae48b37a94b81548c203a2af2bfc2edf716fee8feef723b5a918be46","ssdeep":"1536:pO+AHO444ZUcbnIBF00dq60zcLD8CY81p5HBaLSLVeCxWsXSsA:4WP8CY81HHBaLSxfxWsXS9","tlshash":"71e3837051f52562404783a96bb79b1b2b61e007da4fca947afc6ac48fd3dc1cd8368e","first_seen":"2025-09-28T21:46:46.811175Z","last_seen":"2025-09-28T21:46:46.811175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1256,"timings":{"blocked":414,"dns":1,"connect":205,"send":0,"wait":425,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /ajax/libs/MaterialDesign-Webfont/7.4.47/css/materialdesignicons.min.css HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 27 Dec 2023 01:03:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 51841\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":346579,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ce338643afc79133d3b9973dcf8637fd","sha1":"c02d9f9324b4bbfcd5ce6f1f49633f36c726ebf8","sha256":"fa3f5ca44d7e21e295479aaa531e9949b9742ddf3bec2945f758b42e6616ac00","sha512":"c064689ce0fe9314a461dde23f804ac014566c9e2fe24ce3645386a7ba50688713360468fcfa71ce41caeed39aa3f6223f1c1948058bdd2273a037583251b392","ssdeep":"3072:/RA3YkpX8O2wOBZuRVOh01y7xBqlaOznO3oDmCleSI5B1H3n/ZdhI97:/RAI64wN89BqZnODweSgH3n/hIB","tlshash":"b7742de5d04d24e3f733c85fd740b798458bf2b2d6690e05f68b660d09cba221687f6a","first_seen":"2025-09-28T21:46:46.813922Z","last_seen":"2026-07-27T04:12:31.470177Z","times_seen":8,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:20.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1363\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 17b5ce3f-31df-44c8-8f55-242bf34670fd\r\nx-mbx-used-weight: 64\r\nx-mbx-used-weight-1m: 64\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: fnKXNJiIQPshgGMU_EMRxt81igf0HSrQD5wPwuyS2d-oG46JzIhaag==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4234,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a8848f56f991f508c843fe6646ab88cb","sha1":"525aa16219b1fb2384522a10859bbc860ef03c8a","sha256":"bb665c8952830147a14904f2e6ab3a8d6501b983e28d5913f40e2ada3344f23a","sha512":"49e07401423e4c35fd53c07fcba59d401092f3116d364cfbaae962f450b3f2aaba46417ca01a5d985b8cb935c7e114913f0986a2025e9db6ddd8c98add1d7ed0","ssdeep":"96:mGX3WeMjPVdhViiOUuqqvNQ6tL8cozPXLHySsqezh:mj1jPVoiOUuqsNQWLBozDSSPmh","tlshash":"c391257323898360f9798c093791b865096f701feeca1dd18ae1f53758e17b28e78b51","first_seen":"2025-09-28T21:46:46.81637Z","last_seen":"2025-09-28T21:46:46.81637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:21.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=TRXUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1113\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 17b5ce3f-31df-44c8-8f55-242bf34670fd\r\nx-mbx-used-weight: 80\r\nx-mbx-used-weight-1m: 80\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: We77vbrELvVHHzooRx9EPKF6KLmExfF_vrvqU_7WVEEZsAUqPlJ3tg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3971,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ceacdae831277153299563961572b445","sha1":"e8ac6f8670994fb77040cba45166e6749586ab9e","sha256":"e8e241fb04f3bba0e990edd6c092f4a2721adc1d77deb0f23ccc8e45107579bd","sha512":"f85358ebdef9a19eec59c4934d1cb8fec1ced102c89b1d415b7496b35f689c06ffe54cc11061f416e312dcdba35f4fcd99dc23563aaa980b417d916523c22b44","ssdeep":"","tlshash":"94819e5252dc83b8fa3d4d0a23b7f9661566301abedd2fc185dfa97308e22f60614f41","first_seen":"2025-09-28T21:46:46.818214Z","last_seen":"2025-09-28T21:46:46.818214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/landings/1/img/icons/arrow-down-square.svg","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/landings/1/img/icons/arrow-down-square.svg HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 21 Aug 2025 08:56:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 462\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1017,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7508f44fa253c0f0ee25ab6afeec14a","sha1":"5fab01cdbb77f963a618a49393d80b412b41b0df","sha256":"80ba95fe7ce8eef427ef90e23fe113108bfad6fcee07786dda8e1aaadc24320b","sha512":"dcb45f72a81c203117013c040ef9afb45f96059241913abab4352551c54f3daf52aa202f68656af0792db2497b33ec69b8de657be420d5ba4b21e0e89e565cca","ssdeep":"","tlshash":"7a11ebf1d3e49280e0832b38f8202911917e713cfbc84fcc4675a3e4e2755e9748c0a1","first_seen":"2025-06-23T06:39:12.978283Z","last_seen":"2026-06-05T15:12:51.636129Z","times_seen":30,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/fonts/inter/Inter-Bold.ttf","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /fonts/inter/Inter-Bold.ttf HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/assets/css/root.css?v=5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 07 Sep 2025 10:53:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 147189\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":316100,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 34 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterBold3.019;RSMS;Inte","md5":"275bfea5dc74c33f51916fee80feae67","sha1":"48747b7a60086f97af0d373febcbd1f1bee87f17","sha256":"790c108befe859dac2ddbd20af3fbb6917c601b3d544c8a05761519f3b5508fe","sha512":"0b82f93805dff2769bad25a503c6264094df6f403a636b039a8917aa2a1580b0c70c70ff4eb5135dda83aff0c3092e2a707216920685162ef52b395f82a86c11","ssdeep":"3072:kAkl4i5ZELTzK/PxMJ2YkGIKpqjw0K2pgm0J2Rrq41tIW+yMaf/J7oPHUGHYI9LN:VLTnJ2CW9BpW2RW1JaZWRRnQzSF","tlshash":"08647c03f313c35dc9172d3a8b92c7a0b327bc926b12e10ab7243a55c99b4f85e6b5d5","first_seen":"2023-05-10T15:50:10Z","last_seen":"2026-08-03T14:00:48.995503Z","times_seen":1626,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":405,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/coins/BTC.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/coins/BTC.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Jul 2025 20:38:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1125\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"75f196b437f9d87fdc198bc904c66c4c","sha1":"79b6e300761520f7ad41856878999dbc1fafc137","sha256":"f72b9a231c13012613217eec2bec27b923204e8c6cebc2b2ae51485d2b5d679d","sha512":"de4633885db64868d13a4a4699631acf0b00af0b2cda542c5be26b4dce3a1f8b4e071949280ddd9f3c59eb7a236d5d8d7003ffcb9633e0749fb62d46c780ac60","ssdeep":"","tlshash":"2421f9d3df09102ec4029c9cd4730c6bcc287a963410445b5f7c823fcc0b6496864b67","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-02T14:27:27.463078Z","times_seen":1837,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/coins/SOL.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/coins/SOL.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Sep 2025 10:53:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 404\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5e22a9302a4383454bfe530f0ddffb53","sha1":"be5b706cd340c21bd9be3a3ce56647ec384d6624","sha256":"b4f74a2541dbe53158395e8b054ec169ffe18124b55a0b5e027ebd9c22b5ba11","sha512":"0d94a417d4f0c678faea64e59463ab5c6cd582168ae7e744d44c1d6878deffec49dec89d5b5ca176bb15767eae10cdf9aa1691d4b033367becb08caf8ec56889","ssdeep":"","tlshash":"c9e0f1f27d245ca97f5642050fe80ff2d03c66f515119c861db2ca2d554105545d5453","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-02T14:27:27.449009Z","times_seen":1043,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 77\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\naccept-ranges: bytes\r\nserver: nginx\r\nlast-modified: Thu, 23 Jan 2025 11:11:56 GMT\r\netag: \"679223fc-4d\"\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: PiD5S-kLfzLkGSS1O_0vgthBDzOJzaRi7vsqBLQbVaTWhdXOffySdw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"136f5552348d90a36b6c9a49046926c1","sha1":"b992325f95e0076c147ebf6593433f938b244f4e","sha256":"a60bafa499acbab1b73b92511707557400155adf5fd6a186cd56a2b822935ba7","sha512":"b790d85cf0597615435cf72e9384f8e640642a1cc3cc3564010a006eedbf5bcb956120cb81ebef9254d4675e785091a07d2cd79c66381fdc39b80ee5f4e48b8e","ssdeep":"","tlshash":"baa001f9a5a62009e92076c01cd532941c8983a030d24a102ac13969b55562ada06299","first_seen":"2023-12-04T13:46:15Z","last_seen":"2026-08-01T13:57:27.111401Z","times_seen":537,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":20,"dns":0,"connect":8,"send":0,"wait":257,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.chatway.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Sep 2025 21:46:20 GMT\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e92cf7832aae7d8edc2ba6e7f85493b8","sha1":"8f3b35b53db9e44a35fd26e00c3fe1fa881431bc","sha256":"02d91b9ba6bfb3b8e5da28ba4628f887c207ca087e83b2df3ad228dbb633a938","sha512":"12a0764ce55eb2af4f0469219dc70d7afad9743c889ac7e4c4ab70c31bb2d985411096815abac0eeb1ae116da33d0959016fcd78d5ebcd13e4f5068a5cdf6ca9","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMac5:4hHdPgKQcXr3lVwaq","tlshash":"6da1add1087be114ab831cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T06:50:49.017567Z","last_seen":"2026-08-03T12:26:10.55291Z","times_seen":3483,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":106,"dns":0,"connect":15,"send":0,"wait":31,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/header/technical-analysis.svg","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/header/technical-analysis.svg HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 07 Sep 2025 10:53:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2047\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5032,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90e59c5ef58e31dbfd1c161d480c3dd4","sha1":"809f9c45f64904052694012ba53b17d3fc66b55c","sha256":"930c690b58e3645367624b3a7763de829ad6b9003fd44e3ae2e7893c91cf51ea","sha512":"ed03ad0df3cb39aa47efcf64d98d3206e2bfbeab6a0335b758c3eddca31408a580be3314753496777fe934c09ef25482f9ddafbdc9720a3798669ec0435d52ff","ssdeep":"96:+kUAfxrpn/3lg7arcU7pV7M3qIkLmmKGhdmnJR0UDDVod96:3UgxrlqOoq5KGw9DhoH6","tlshash":"82a1738b033cc2f877d86468a875364236b254bf5678a108f3bfb8273747f662255d58","first_seen":"2025-06-23T06:39:12.924117Z","last_seen":"2026-03-03T17:48:17.638829Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1028,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:01:34 GMT\r\nexpires: Thu, 24 Sep 2026 00:01:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 423887\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-03T15:30:57.854998Z","times_seen":387010,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":84,"dns":0,"connect":16,"send":0,"wait":15,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/admin_icon_dir/1738415629888.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:21.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /admin_icon_dir/1738415629888.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 18:33:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24699\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b2cb1438cd00cdc97302313232da72b6","sha1":"73b382c1e648a0b61092613b34420f928987c66e","sha256":"69f1d6c45468841334cf3210de499123c2d28570454ab61cce553299750a74c0","sha512":"c7973af5ae236cb9cdf0fe5c00ae512920cd64036fb9c222ff4d926f072b94da16fd317144e7d8e756a1ce09fbc9ca0462c9f293e395223001083fb9cab0eb34","ssdeep":"384:CPegr47v5twTzO4t2eta2R0vH57QxKyFkuOfWTbB2I1Rw8KMLCFdFx9p67u3:Pv5twTzBKZ0xKyquIOM8zLCF5W7I","tlshash":"43b2ad8bee99b25fa559692757a336d6c531940b70082fcf6f4180b44c930caf57ce4e","first_seen":"2025-09-28T21:46:46.796095Z","last_seen":"2025-09-28T21:46:46.796095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/socket-io-bTi66-QE.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/socket-io-bTi66-QE.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOVL0SFPj752zWCgaZlxcXLg7yh%2BrvTUcQv1jK5b7yg%2FTiGoyk6R%2FCgzSXAzX0w82uvEEwZSCV6%2BgRZRGCyPRpWG5PYA4kGOC78BbzpYFkYJ\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-9138\"\r\ncontent-encoding: br\r\ncf-ray: 98666eda1caf49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37176,"size_decoded":0,"mime_type":"application/x-javascript","magic":"data","md5":"66e2055675b5f9ba4a4859b957bbca64","sha1":"a20d7b0fc4feff1aa11fff546104a3204e75494a","sha256":"ebedb053e4570d0cd4ad727580b68bd15d38353f420f36f4e555ea037d20e029","sha512":"12703e716b8bdad4be20432e6ad67d378312c141f63bbeddbc2494a05349c99ed0d24200ce369a2fc50789236568581abc5c52de3b0bc600762e0db4de3b28f2","ssdeep":"768:4zMhtTwsaSn5FFUlffRdMFyRsTngw0IQ2ovp7czzUjEQphySPrY9nZh8bT5Vto/e:VXn11TgBIcv1c/Ubr+C","tlshash":"cff2f9c8b2a0946683e2a1a290750203f33954557409869cbb2ceef7ed7deca7173f75","first_seen":"2025-09-19T09:30:35.425382Z","last_seen":"2025-12-18T10:54:25.530934Z","times_seen":418,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/landings/1/img/prefooter/lg/01.webp","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/landings/1/img/prefooter/lg/01.webp HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 07 Sep 2025 10:53:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 67322\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":67322,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"913416a8bdcfe328f0adf71c073de669","sha1":"b341c05bb06fa6ca71ea4ddf332309980a4d175b","sha256":"b16c4f253da4c4367c968868b60eb2ff65b73cf3b1cdf01432059f01bfc2105d","sha512":"1b9c220ce846d7ee0124d3df4ceff53514085b40f1a0d9a8e97c28d7ac442767d74c6774286e1051247ddb3c7c270c6500d12ae0745a3f118b92780de9fc5022","ssdeep":"1536:3eSbqijiUJ17x1nhIlomzJX9Tpb1/TwvAY:3tb/dJl09Tpbt8","tlshash":"60630286cfc29908d14fab3cfb53b948d309e157d35ed66aa221a82558afd10810df3f","first_seen":"2025-06-25T10:39:15.194563Z","last_seen":"2026-03-03T17:48:17.594387Z","times_seen":38,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/coins/BNB.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/coins/BNB.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Jul 2025 20:38:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2560\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"cb84d3ca48a52e3df1025731a8bef4ec","sha1":"b059f2eb3aaf93145fd62647cb908c5532e06795","sha256":"0f4502d8c5254df1eb0eb8d124c7684b4f02e2a5004525d5bd7acd18a6ebb9fc","sha512":"d7cd5d9aface1bb4718d418d1f7108bbbde7e8e24e926ce4bd4a88f51c715759e55741de3d6b17e7e54dea502761817e093e768a337fc0030a259fe9b4338151","ssdeep":"","tlshash":"7e513a6a47020c971334d44f89fc3eea1d6edc1ad421e0aeee0197fa18101c18dbe343","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-08-01T18:09:33.211273Z","times_seen":1611,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:20.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=ETHUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1363\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 33506e73-bc6f-4f27-8357-7d88200c4f85\r\nx-mbx-used-weight: 62\r\nx-mbx-used-weight-1m: 62\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: fpw0vGhzpvwnkMilcLJLBVP5z1jPGGfehB-EiS1tsbJfirZF2LF4hQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4234,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a8848f56f991f508c843fe6646ab88cb","sha1":"525aa16219b1fb2384522a10859bbc860ef03c8a","sha256":"bb665c8952830147a14904f2e6ab3a8d6501b983e28d5913f40e2ada3344f23a","sha512":"49e07401423e4c35fd53c07fcba59d401092f3116d364cfbaae962f450b3f2aaba46417ca01a5d985b8cb935c7e114913f0986a2025e9db6ddd8c98add1d7ed0","ssdeep":"96:mGX3WeMjPVdhViiOUuqqvNQ6tL8cozPXLHySsqezh:mj1jPVoiOUuqsNQWLBozDSSPmh","tlshash":"c391257323898360f9798c093791b865096f701feeca1dd18ae1f53758e17b28e78b51","first_seen":"2025-09-28T21:46:46.81637Z","last_seen":"2025-09-28T21:46:46.81637Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:21.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1264\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: e9414f6c-da7a-4fba-bc11-a828e48e2114\r\nx-mbx-used-weight: 74\r\nx-mbx-used-weight-1m: 74\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: iwlTeJldHM_chboRfs11TAF7oWbG0Okkpt7hjf8ase1ZQ3qwCjUI9A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4162,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f7503fd40c9557f65fae120e3a642670","sha1":"32e4947cc69e490597f65f06e8ad4e15e3e8b975","sha256":"51b30ba56ec6ec9fbbfd3661901d4f7fa8d2a531604fe44df1b6610916385af3","sha512":"b783f526443182cf77eccb2b74ca2d7766a73ebd93daf938dc51d53e1d795cd20f27275795d3a41bd791b12bd501328c8f6853a9152e9b5fd18fe8769d52fc1a","ssdeep":"96:mQBqQ5uK3ZujqQVbUHh4g8yvIvBYGXUlBfkbmDXDuZ6oOi3YDEdxqZ/L5:m9guK3ZuTbQ4g8ywvBvXUlBfcmDXDuZG","tlshash":"80812771238453b4fd7d8d0a23d1faa59df6301beeca1dc099d1e73748e22b24a48b46","first_seen":"2025-09-28T21:46:46.827584Z","last_seen":"2025-09-28T21:46:46.827584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/js/toastr.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/js/toastr.js HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 21 Aug 2025 08:56:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4735\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24855,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (327), with CRLF line terminators","md5":"a02ccbbcf3073559037a62af82bfdd24","sha1":"4d5f7b3f3f280698aa26b10e1d7c6dd5708d64aa","sha256":"27f959b17ddfe77ca20a31b9950ebc3fbe8030c3ac376eec7355b2d7925e364c","sha512":"35acaadcc160935be74fb1492b1b0ca205aed6b61d8bd8edf4e26254c7772da02941ec53de59e3d66ce1695cc12de4ed9cf32b750e04659c7c0e2521b4697f22","ssdeep":"192:JJZWM9gzM3t3QrpJvxl6Xs8cZ9tID6CqQwPjOoOg6yS21tl3jWq5T14:JY45Kk7cZDItqLNO6S21tNA","tlshash":"deb20a08695263654cb7737c8aab800cfb769323458a96067dbc92d82f70714d6f6fec","first_seen":"2023-07-07T00:40:59Z","last_seen":"2026-08-03T06:44:20.962034Z","times_seen":966,"resource_available":true,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":819,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/untitled-app-modal.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/untitled-app-modal.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 Aug 2025 08:56:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9947\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 345 x 252, 8-bit colormap, non-interlaced","md5":"5559668af3e553fc871a55adf3347819","sha1":"4a699964c855c8f83c2610de0af2419a71257c8c","sha256":"8ac5dfb6306149a3edebaf77bc100de9ffa8af46e56b8bc79716fc701e207617","sha512":"e0edab55aac4f8d743e98bbb7d52ed7c5b1f5b32c84e8cc271015c10d57333c2b458f30b4eb5e41e0c7e91b02dd46a8cf30b9653a3e932949413f85021485967","ssdeep":"96:JHrmqk0gW4mwLtat2J2wx1Q4Hs3NGlGzribeTnSodQNDirGQ0rNpV6x/ddcEoSa8:JHrmqk6QoqeTSoao4pVCdHahAob+8RLE","tlshash":"3b225ba49f9578c0975e1e73b5e5004548330ae7cdc2bd4abdce542a0f28b819f2b9d7","first_seen":"2024-12-06T22:27:57.026807Z","last_seen":"2026-08-01T13:57:27.100549Z","times_seen":416,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1027,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/coins/XRP.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/coins/XRP.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 29 Jun 2025 15:12:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 953\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"92f9d15be55070c0f267e7b9609211da","sha1":"d25e8395244487e169b16cb9508e434ea1ea61dd","sha256":"0e7d0965ce52308846834de79ad8305ea31542444a1ba54888843fc0214418f4","sha512":"d39d1087b689cf8f8d543a282dfc802e0e996ddbdb0553b7376958b0be63dd8f6230451cc3cd3df7d63748ab2165e8e82433c35d4131a7a2c137445ecfeee95b","ssdeep":"","tlshash":"e91188a14b659e01632bcd7fcb2a0142b20b22efb465d716a88f533d0795d871059f85","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-02T14:27:27.479533Z","times_seen":1620,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/api/getLocale?v=2\u0026lang=en","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /api/getLocale?v=2\u0026lang=en HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-03T15:29:38.685376Z","times_seen":145557,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cloudflare.com/cdn-cgi/trace","fqdn":"www.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.16.124.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 11:32:18 GMT","end":"Fri, 26 Dec 2025 12:32:16 GMT"},"fingerprint":{"sha1":"96:58:EE:F2:DD:E8:AB:AF:C7:B3:7E:87:0A:25:9F:35:DE:C6:0D:5C","sha256":"B4:4D:CA:A8:42:5C:CD:98:F4:F4:A6:C4:D6:64:C1:B6:B9:CD:11:BC:4C:12:A7:82:3B:A4:33:71:8A:A4:06:BF"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: www.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 98666ed2dc91b51d-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"5e827c3b1f3bcdc10ecf8e2ca686e49c","sha1":"1dbc64e5bf0b30088d48b7d42d1748cb3e3e4af2","sha256":"24a5907ed43f0b0593113e86feed8d30ad375962542872e9433ff650299a224b","sha512":"918929e584b60be53adf87c8accdfa6b0cd6148c24c2aff118aa810c3327a98b6078a1f8e3cf50b29b9336daf8277b30ee1ebbf850e66c69500e441e53676bee","ssdeep":"","tlshash":"97d0ebc7827c020834acc40d029b6281c7a0108700eab932fcf2c009efcc2ca00ccee0","first_seen":"2025-09-28T21:46:46.832481Z","last_seen":"2025-09-28T21:46:46.832481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":8,"dns":0,"connect":2,"send":0,"wait":4,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/library-chunks-1-CbCrXAn7.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/library-chunks-1-CbCrXAn7.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-BamluPQq.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTrx0eLvMprTqaKAPMueBoOkYbJcTbv%2FxBGjzXB9saxii9FoO%2FSfM7hVtwghdZliF7zSVEeVX%2FVeswAjXP%2BmaCY4ieUw2uylYctVGhPKmzEW\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-9cb2\"\r\ncontent-encoding: br\r\ncf-ray: 98666ed99bef49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40114,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (17232)","md5":"f3c36bc4f26318e30af8527a4307e319","sha1":"3cbd90f404b7205d10d3f649684d9690de8d808b","sha256":"f57741f6931441d3a2024c07084397093ba88d57c7b3434e568fad84ffcd13ce","sha512":"7ec4477c03b27922de40dd9975829674c5b16a7ef316b2fc23525ead63d765322565aebee04586f94764252b78997500176c9aabba1af3f2e55bd561fbeeaa19","ssdeep":"768:li1q3dEbzRCSf5z92W5GZV7iLE4Vox/NeL7qx483ptHUzilPEHHhs8wIsADq/pon:6V+wXHXe7bnDUj","tlshash":"210318d976d1b47203ea14f8406b0902f33a9a19744d84e4b16cdceb3db610a96bbf7d","first_seen":"2025-09-19T09:30:35.481483Z","last_seen":"2025-10-27T23:50:55.194897Z","times_seen":208,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files-cdn.chatway.app/OEoZBF5gYjEgl9xPsxPx90k1p1G4EtSaVhVxIm6FKEXcjIki_88x88.png","fqdn":"files-cdn.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /OEoZBF5gYjEgl9xPsxPx90k1p1G4EtSaVhVxIm6FKEXcjIki_88x88.png HTTP/1.1\r\nHost: files-cdn.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 3040\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Sep 2025 18:13:54 GMT\r\netag: \"7650a125d29d20ed5e3ddd5bd8bedc61\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 1dgoeXV3qGD3YyosgXH9Km2xbL_WPSwmG4n9VNuSyGT57fz3mD-mYQ==\r\nage: 49\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BJgUVbk5edOnfXv2SIu9TMV2qO7nRbZwBJgMn6Mj0UJ1d319DNOlvIfM8E%2FgMIKRXNO4bSvLu1OcADvYDT%2F9dTCQUZFlIdiko1Eq9fiXqNFnze0\"}]}\r\ncf-ray: 98666eda5d1c49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"7650a125d29d20ed5e3ddd5bd8bedc61","sha1":"d3906494ca168aefdc25fc6566079052ca7e504d","sha256":"569468c8e36807fe71d71eb30b016ba0479245d19aba831d59778adcaefc747c","sha512":"b2bf5dada5e121073a4103e6e8aa5f212b34547d0f94b5deaf9e80ade8c68f111a1eba7e8d6ebe1e64462cb04b56d0b5ad650a68b51cdea6a17bd8d2b6b01e6e","ssdeep":"","tlshash":"f7513c9af1e050848ef347614f5620d4ec297fe3e078998de666844d3c936e91922c6a","first_seen":"2025-09-28T21:46:46.783583Z","last_seen":"2025-09-28T21:46:46.783583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/ajax/libs/lottie-web/5.12.2/lottie.min.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /ajax/libs/lottie-web/5.12.2/lottie.min.js HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 09 Jan 2024 01:50:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 72998\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":305543,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-03T11:12:52.035643Z","times_seen":2314,"resource_available":true,"data":null}},"time_used":1027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":616,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/header/heat-map.svg","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/header/heat-map.svg HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 05 Aug 2025 12:32:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 961\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2031,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62a9c22196ae64037a3c94274b8d6f73","sha1":"3315cbb8996425adb54e740c027f6639e19dbe83","sha256":"3753b8a2dabe505976afffc621d7662cb3bb55b41689d0fe792bfbc830d8320c","sha512":"4415d883fe67bcbd788b764460307c1680ca0062f7adace8240f597675196e01f172e92fb475698ba52500619bb586f5418ee0a9c6c3e20b37b26ded39129e57","ssdeep":"","tlshash":"8f4196e5533985790b18d72d69797a061ef214d7267184acfb2e383a3743dd310c0f99","first_seen":"2025-06-23T06:39:12.965899Z","last_seen":"2026-03-03T17:48:17.637938Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":617,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Poppins:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Sep 2025 21:46:21 GMT\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80df91dcfc8560910aca9bdd91a1e7d0","sha1":"2949de02fc38469258987e9b847a70a9cff1a21c","sha256":"0552ee50f635535685ba2713af81fa081791d7705baa9cdb3c5d1f463aa0a228","sha512":"65cbf1a5ff0d2e099211a39ed5128c8a95587b42dc854f30ffec1fc82e658911808709e5300319b495ec69bed73670e5c91404feb94fda4e7315b9b79ec62402","ssdeep":"192:+pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:+mkX","tlshash":"aa22add1087be114ab835cc123ce7d36ee1e9255b850e5786bfd0c98adabc254372b2d","first_seen":"2025-09-17T11:27:36.910597Z","last_seen":"2026-08-03T08:42:43.040176Z","times_seen":8128,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/cdn-cgi/rum?","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1065\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://widget.chatway.app\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RmrufNwIxctScCZHLjdxe5Q2xZc1sUv5DcCYUZU7w3i5Kc5ikUJi8o8jRG34jQbBN%2Bz5876C93AAS0NNeC7ANcVQbgLDhMIjgtXEIlpL6anj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98666edb0e4f49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T15:28:01.656173Z","times_seen":17692056,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/js/main.js?v=3","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/js/main.js?v=3 HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 29 Jun 2025 15:12:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4767\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21249,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (430), with CRLF line terminators","md5":"c8129e7a736eb7ab1bb4ee9f4d919fdc","sha1":"268925c35b15f7b723c0c4ff913610f7c22bbd12","sha256":"0fa2bfa1e742acff380af5b6ea26a4cddf165f7313c43d64cec77e2de97ab7a9","sha512":"5efb0f92dbb776182f79fa6ca42a0f22e44b753fc11a335a4de33b46b1a23c6d47bd682063b010144cd32e00a5e7bdbfba5db45a0049339b7a0db0388da2318e","ssdeep":"192:GVH2ZcNv48zKAXEWOho7Y/YJYScEElXRe0wlWORznvlpL1OECuJAtYnnThxg4S7/:GXKlo7s8RElXRnwlWsjdKECuFbK7roO","tlshash":"64928298b12129aa813b7379be775646fb380027d341d349bd6c1de11fb2180d9a3f6e","first_seen":"2025-06-19T20:02:29.443643Z","last_seen":"2026-08-01T13:57:27.093084Z","times_seen":303,"resource_available":true,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:20.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BNBUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1258\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 6435d177-fa32-4b84-83b6-269ad5468436\r\nx-mbx-used-weight: 68\r\nx-mbx-used-weight-1m: 68\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: tWhfYkpsTCiWSVD7sut4B9BB6LANqR2IbWYFl0OxH5EUbWluayB7rQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4095,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3703c0b07b28ca227489756727bea844","sha1":"3e54c2c02ccef6bca7c4c66785205404574c2ab9","sha256":"0b40c86fab7d2c81e28610a328ad67de7ff160c6acf11b34dc5f969d11cb0bed","sha512":"11cf009d3b485ba0933bf3a694b97555b81af41b35d7084c1a881b8c782524fb31427e3625b673b4c04714b48fc20b6c9c08e6da6580feb6042788bdb2d887f0","ssdeep":"","tlshash":"3481f7a5e358c7edfe794d1d2391b9d7096a305aadca1ec0dbd1a73318f22b20608712","first_seen":"2025-09-28T21:46:46.801391Z","last_seen":"2025-09-28T21:46:46.801391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-3-linkify-DlOWVUQi.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/vue-3-linkify-DlOWVUQi.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dRnNlxyEOLBgx%2BeNG2i298Grc6yHqCkd81TOYe1DvjmDXSzBBVOjffzkBvFNYoVwzV9JDfviV1CwdHxp0scEWGWwQq6wVzhLh%2F0%2B%2FBcxg3ey\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-ff39\"\r\ncontent-encoding: br\r\ncf-ray: 98666eda1cae49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65337,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21053)","md5":"b48b3ea3c57b51c99db5dcc2bd654614","sha1":"da56becba8d73a9c65dc0a17acd3ba8ebb63d5b1","sha256":"e3f90028af93d5570e2912f867ebe60a0c05aa9a3449d561102f8a6ad37eaf6f","sha512":"044a23444d4daa3781b44cbdc797b01554fe652bc4cacdb341c0a4234176f468109b4a716e08beadfaff98952bd76acd23ea597bba57d5b27c38ca4d2da69bb6","ssdeep":"768:u27wR9FY7HCua/sF+sw4nlOnib6w2JTk7vPh8H9OiQagMw47Tz1ETEW9r:TwR3CCua6DsniF2JTMqHwioV","tlshash":"c7532ad8f6c2e079475350238caf0304507c9964fe85c52db9b8e4e734a995bb1bfab8","first_seen":"2025-09-19T09:30:35.305849Z","last_seen":"2025-11-11T08:53:54.510295Z","times_seen":276,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:02:25 GMT\r\nexpires: Thu, 24 Sep 2026 00:02:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 423836\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-03T15:27:56.613777Z","times_seen":287109,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:21.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=TONUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1115\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 21e2ab7a-c837-4ee3-999b-05b553435392\r\nx-mbx-used-weight: 78\r\nx-mbx-used-weight-1m: 78\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: fJ-5ZrRK1N5XvFCTYXGCHQ8yRdipQshcfSI6SbSX6A0tdthF4-pl6w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3877,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1d57ee0163af97fe2ca988321371b7d8","sha1":"e1bd8729df48426b4819970059468ed2c651568d","sha256":"06eb13800872906ad3f079bf7c371dbae08e9f9e53f327d3a90e78346778e165","sha512":"a16795f3629c48b2205d252e7798336b7d74dbc62eccae64619e84626acf27b0c0cf03d9c4e398cf9a10cf2fa4bffed7cbe1136b28ad73d77e424780ca5f0fbc","ssdeep":"","tlshash":"4681b16113948360fe794d196391fc56197f30daaeca2fc489a1eb331ce32b21759f52","first_seen":"2025-09-28T21:46:44.388525Z","last_seen":"2025-09-28T21:46:47.877353Z","times_seen":3,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/admin_icon_dir/1738415629888.png","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /admin_icon_dir/1738415629888.png HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 26 Sep 2025 18:33:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24699\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b2cb1438cd00cdc97302313232da72b6","sha1":"73b382c1e648a0b61092613b34420f928987c66e","sha256":"69f1d6c45468841334cf3210de499123c2d28570454ab61cce553299750a74c0","sha512":"c7973af5ae236cb9cdf0fe5c00ae512920cd64036fb9c222ff4d926f072b94da16fd317144e7d8e756a1ce09fbc9ca0462c9f293e395223001083fb9cab0eb34","ssdeep":"384:CPegr47v5twTzO4t2eta2R0vH57QxKyFkuOfWTbB2I1Rw8KMLCFdFx9p67u3:Pv5twTzBKZ0xKyquIOM8zLCF5W7I","tlshash":"43b2ad8bee99b25fa559692757a336d6c531940b70082fcf6f4180b44c930caf57ce4e","first_seen":"2025-09-28T21:46:46.796095Z","last_seen":"2025-09-28T21:46:46.796095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":414,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/img/header/cross-rates.svg","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/img/header/cross-rates.svg HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:18 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 21 Aug 2025 08:56:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1331\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2959,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0bf60ba1a2fa5df0305c97771599c40d","sha1":"16d0b9736eb8b5bf9122527d15b6c5b0d5b668fa","sha256":"2a31cc0568a0f45ec935a58b2e66126cdef8df6377bd7db9169a0f02f2cfd18d","sha512":"eed55c6708362636e79d707709d6e6dab5d6b994ae6e89ac3343b94ec8c0b93a98f0a62c7146bce4417a0e570956883680786238f6cf51163ad9860ded0d0d30","ssdeep":"","tlshash":"fc51da43d378e674aa4caa9d71503a50667114bbfa30509887761f5e1c437d7b284d35","first_seen":"2025-06-23T06:39:12.954655Z","last_seen":"2026-03-03T17:48:17.645056Z","times_seen":47,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":617,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:20.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=XRPUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1226\r\ndate: Sun, 28 Sep 2025 21:46:20 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 25dc1a9d-6e1a-4c18-a090-67b91f55fc99\r\nx-mbx-used-weight: 70\r\nx-mbx-used-weight-1m: 70\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: n8exgtCdXBz8nuDw7qDhQsgO2wZ81c-jxxFavGNjwrU2lUix7_5ydQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4021,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c717d0185cc0433fcd627342ae4d54aa","sha1":"8a6f63880c2607eba55b1b86a913a8b32fd19bfc","sha256":"300d881e0356b1dad8eaf0e7af8ca8509e42d5e8a3221ed67c7f1414dfe734c8","sha512":"b9590419c859af3c9ea8cf86c97ab86b683a8f9d2b383d8545f7c894019a6fc0e2369dbcd089bbdfe4a194fb77bb76faa066211245134f5e6cfb290b8d3b7783","ssdeep":"","tlshash":"05811691139483a0fa79490927d5bd652a7b301eeeca1fc08be1e7771ce23720639f16","first_seen":"2025-09-28T21:46:46.79377Z","last_seen":"2025-09-28T21:46:46.79377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98666ed98cc856c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-03T06:44:44.755392Z","times_seen":337634,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":41,"dns":0,"connect":1,"send":0,"wait":24,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Sep 2025 21:46:21 GMT\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5993,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9c51d4ed0528132b3a6be429dca636b5","sha1":"18cc681e66f5b6696a4ff89774e53aef2a51af00","sha256":"45a8505a86014b27b96db52f81bf4dbced7a8eb9b419d28e89bcfccb334b49b2","sha512":"3fa61799ef336da5f4c9a0a0fcf7d14fdb09e2e18cbc1488eae44a06b61beca3831c9eadd77b22a16a84e8041074d74d51429e23a1a6e8ce9b56860ed682e800","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMac8:4hHdPgKQcXr3lVwa3RzJZ","tlshash":"15c19cd1087be114ab831cc123cf7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T11:27:36.868673Z","last_seen":"2026-08-03T15:27:56.61884Z","times_seen":11029,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-3-linkify-DlOWVUQi.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/vue-3-linkify-DlOWVUQi.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-BamluPQq.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BnNULCyvo0dII9LHL34NhdfN6r%2BejLcpFEakPcE33XstxGUhsxDKvULuuNEzlOAluI3BvtWplJmcv%2FGsAEfbwcA%2FGnah%2BMNiV6ELHd1fzIwl\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-ff39\"\r\ncontent-encoding: br\r\ncf-ray: 98666ed99bf249c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65337,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21053)","md5":"b48b3ea3c57b51c99db5dcc2bd654614","sha1":"da56becba8d73a9c65dc0a17acd3ba8ebb63d5b1","sha256":"e3f90028af93d5570e2912f867ebe60a0c05aa9a3449d561102f8a6ad37eaf6f","sha512":"044a23444d4daa3781b44cbdc797b01554fe652bc4cacdb341c0a4234176f468109b4a716e08beadfaff98952bd76acd23ea597bba57d5b27c38ca4d2da69bb6","ssdeep":"768:u27wR9FY7HCua/sF+sw4nlOnib6w2JTk7vPh8H9OiQagMw47Tz1ETEW9r:TwR3CCua6DsniF2JTMqHwioV","tlshash":"c7532ad8f6c2e079475350238caf0304507c9964fe85c52db9b8e4e734a995bb1bfab8","first_seen":"2025-09-19T09:30:35.305849Z","last_seen":"2025-11-11T08:53:54.510295Z","times_seen":276,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://widget.chatway.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:02:25 GMT\r\nexpires: Thu, 24 Sep 2026 00:02:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 423836\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-03T15:27:56.613777Z","times_seen":287109,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":120,"dns":0,"connect":16,"send":0,"wait":14,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:21.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:01:34 GMT\r\nexpires: Thu, 24 Sep 2026 00:01:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 423887\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-03T15:30:57.854998Z","times_seen":387010,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":47,"dns":1,"connect":15,"send":0,"wait":15,"receive":2,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/landings/1/js/chart.js","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/landings/1/js/chart.js HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 17 Jul 2025 20:38:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 67478\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":205222,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (57104)","md5":"ddb8b0991b8bb5d93eba1b0d2a64cffa","sha1":"31298e4d3433c99cb3cf44b72009f9bfa0342c0d","sha256":"0e2326c6868072bec1592760c6729043caeea2960a2b46cee6a2192aac6abff0","sha512":"6784496b7e8a97ce2e9e87afcf7c32674b850cc8fb95f6b102cfa18aa5d779971783fae37584da7c05f13ff84a4aa5bc5b0a37bf07e0d95fdd92e1f97ca3b66f","ssdeep":"6144:HycGOv7siC5tTzhSGmeab2OLK8rTleMR5LTDmNV0Fz42HRcXj2c:S8siC5pzhSGmeab2OLp9eMR5LTDm/0Ru","tlshash":"f214f5d53342b12282d256d6583a050ae3366648354789acf2bc5ddf3c6a98b71fff38","first_seen":"2023-08-25T08:23:08Z","last_seen":"2026-08-03T03:11:39.113923Z","times_seen":454,"resource_available":true,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.chatway.app/sdk.css","fqdn":"cdn.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /sdk.css HTTP/1.1\r\nHost: cdn.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 Aug 2025 09:48:19 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: cloudflare\r\netag: W/\"8b1094492bb5d89a1c57c692145c76dc\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 547726f52324ef3a0c4ac01a3354e36a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL50-C2\r\nx-amz-cf-id: w6BfLQxZ7Nh4Gpk6FnlMmPT3XIZIjeYHg8VUzyTVfvGNy7n3ZPEiVA==\r\nage: 6966\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Jc8NsBKsEGPvyc2fUZCw%2Fjk%2FYDaRmMvnzo4dl%2Fnd7xj4uUNhC7bTCanCIYpFE5UvERYmbdYWI%2F3HzSnvf%2Fo8Atk2QMW4DIHmnH8AnX6\"}]}\r\ncf-ray: 98666ed2cebe49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15771,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15770)","md5":"8b1094492bb5d89a1c57c692145c76dc","sha1":"48b709d20fbf2c3fdf3d3464986cbc20809a2dfc","sha256":"38e95a6f5bd384a089c755dd75e162c958b938529f8a73d40e5b7d096d5ad308","sha512":"e61751f6ecf14eb7ab10d049ddabed7d62b33abbdabaa1aac5aa69d00d6213817cfa8ad32ae81995c1745b4a797db37bdbeb0fa94920aadf68c13da0f34ae5f8","ssdeep":"384:xJpP9LV4n+nvUus++3giGiz07gR3C4jaZVCuQxeEEdHgpVUmWJo0m5cgrxHQ0k5A:xJRGDb3Q7NAEtmG/gCw","tlshash":"2b621072db821038f2a3828df5c1eead1a38c45bd3160ebeb251f539c1da5d63721e46","first_seen":"2025-09-02T13:40:09.459904Z","last_seen":"2025-10-20T18:21:40.821784Z","times_seen":153,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/socket-io-bTi66-QE.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/socket-io-bTi66-QE.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/assets/index-BamluPQq.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roCLVhAU2q4wX9h0YL6jz%2Be3Z1SJAjNcA9yI63CrzBlXqLW025nU2HEsz7sM8igsCeeZFRuR5SrCfhemlWXsGP7nsg5ABsV2ExqKrUKmCyIx\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-9138\"\r\ncontent-encoding: br\r\ncf-ray: 98666ed99bf449c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37176,"size_decoded":0,"mime_type":"application/x-javascript","magic":"data","md5":"66e2055675b5f9ba4a4859b957bbca64","sha1":"a20d7b0fc4feff1aa11fff546104a3204e75494a","sha256":"ebedb053e4570d0cd4ad727580b68bd15d38353f420f36f4e555ea037d20e029","sha512":"12703e716b8bdad4be20432e6ad67d378312c141f63bbeddbc2494a05349c99ed0d24200ce369a2fc50789236568581abc5c52de3b0bc600762e0db4de3b28f2","ssdeep":"768:4zMhtTwsaSn5FFUlffRdMFyRsTngw0IQ2ovp7czzUjEQphySPrY9nZh8bT5Vto/e:VXn11TgBIcv1c/Ubr+C","tlshash":"cff2f9c8b2a0946683e2a1a290750203f33954557409869cbb2ceef7ed7deca7173f75","first_seen":"2025-09-19T09:30:35.425382Z","last_seen":"2025-12-18T10:54:25.530934Z","times_seen":418,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/library-chunks-1-CbCrXAn7.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/library-chunks-1-CbCrXAn7.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5u54WS98yCLJsfdNAPKae8o4SLZA5GSx%2BbTNtYRbkcT%2BuIi5bAyk6zycrEWjbaRbqU0Ep%2FeubzFX5aOEjDVrgMwyBanPSEMLP4zRx%2Fta0Rvc\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-9cb2\"\r\ncontent-encoding: br\r\ncf-ray: 98666eda1cac49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40114,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (17232)","md5":"f3c36bc4f26318e30af8527a4307e319","sha1":"3cbd90f404b7205d10d3f649684d9690de8d808b","sha256":"f57741f6931441d3a2024c07084397093ba88d57c7b3434e568fad84ffcd13ce","sha512":"7ec4477c03b27922de40dd9975829674c5b16a7ef316b2fc23525ead63d765322565aebee04586f94764252b78997500176c9aabba1af3f2e55bd561fbeeaa19","ssdeep":"768:li1q3dEbzRCSf5z92W5GZV7iLE4Vox/NeL7qx483ptHUzilPEHHhs8wIsADq/pon:6V+wXHXe7bnDUj","tlshash":"210318d976d1b47203ea14f8406b0902f33a9a19744d84e4b16cdceb3db610a96bbf7d","first_seen":"2025-09-19T09:30:35.481483Z","last_seen":"2025-10-27T23:50:55.194897Z","times_seen":208,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/css?family=Roboto:100,300,400,500,700,900\u0026display=swap","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /css?family=Roboto:100,300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 23 Sep 2025 19:30:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1401\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1401,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"51980597d4b324f3c3fbf627187c6dbe","sha1":"17dcd4ccbbec31628602b08927cfeaf745fccd75","sha256":"dc9809f6970ad1b9fe874038e819d34b60c841c824dcd389c9fb147948191523","sha512":"02c290d4a38f5be246fe8e680b42145ad8b5261e0cf20f85bae7b9205163e0000d13d2e5b6d2ab9906b1ef61095f6094a80de9e8826e594bcc866e8a52e6031e","ssdeep":"","tlshash":"ee210750481b0942ca625d293bcb7f78fd2d58151063c0ed8b389c78adfb52b9386b6e","first_seen":"2025-09-28T21:46:46.846218Z","last_seen":"2026-05-15T23:47:03.975104Z","times_seen":3,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/index-BamluPQq.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/index-BamluPQq.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4LeMwnIi%2Bwio0LefpGdANPek3NJgRRDztJ7PS34oI6yonwQAlrKwlrib%2BW2D858wVrSxhGyr%2FeKYP5SzSNlIdby9OWiaiQ%2BVUymfoHNmVFVK\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-7bca0\"\r\ncontent-encoding: br\r\ncf-ray: 98666ed94b5b49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":507040,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28153), with LF, NEL line terminators","md5":"597c270ff92f96c3a0173fcb455a020b","sha1":"dd6aecc77b471fbbc17b46e486bfa3d287008f03","sha256":"5b9dd88fd7220400e62051e8f48c6bfa437bed273ea80a6a307ef6288178116f","sha512":"00e45d387ef7f39d01f658af7b38923e717678f483b2b9eba2928297c91982979c5c5f68a80b2a242d435c57498a435b4aa86fad4b5276e9e7d173d7f95c32bf","ssdeep":"6144:LBWECwncgvp/RrV7V1jB8MZMFbpgQk+Bcahu+BoHa4CC5KpGlw:9jcfMsFRJglw","tlshash":"56b46be631d1b73ba2733710981b604abb2c5da5dc48c49cf6ebccde2960854617ef68","first_seen":"2025-09-27T14:30:52.785809Z","last_seen":"2025-09-28T21:46:46.849015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.chatway.app/widget.js?id=D6TLgwFrVsa4","fqdn":"cdn.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /widget.js?id=D6TLgwFrVsa4 HTTP/1.1\r\nHost: cdn.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Sep 2025 07:13:58 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: cloudflare\r\netag: W/\"cb98a6fac97ea8a960bf5564d644bccc\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d7969a7dfe0a063d186d3c72531d67be.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P1\r\nx-amz-cf-id: dAPpzZP6BAUMY_GMOYe357jvYYIVnc4uQ0BGhL2tHjttp7G5fV_Rxg==\r\nage: 52294\r\ncache-control: max-age=86400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrWZp4RubrBePPPdtrd5eynJEj6ItYPhIXN8GbW1gIi6%2FkenWnEEWdpfLlBpp7LXRv8yeVxKRhW21jcmB6cpnM5br9ptDjCyvrnkD11P\"}]}\r\ncf-ray: 98666ec97e3249c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25221)","md5":"cb98a6fac97ea8a960bf5564d644bccc","sha1":"bbf8a37f9e1a0184dfdef96021a7afec4b1722c0","sha256":"1c2130b3d2629e931aa689b54391896d1766378347060bfb0024def30db97e54","sha512":"9809ace220f67d70f26bf8fc95e9a3a0cea270b17d2871d2b112d7024f4340b846c79540efa374ad86dfcdac4aaecb071badad0b19559a9c08b2c06a2e97c25f","ssdeep":"1536:GdVxkqiB//dYjb4J5K3mlpvqkBmnGpI93o:gkF/dYCnnqkEGpIe","tlshash":"ee531ab07166183556eb48cda469b7002b115c9eb485cc78fc3cdcaabb95cc68237fb9","first_seen":"2025-09-24T05:37:31.074167Z","last_seen":"2025-10-16T19:15:05.538429Z","times_seen":107,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":12,"dns":6,"connect":1,"send":0,"wait":68,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.3.48","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Dec 2024 00:00:00 GMT","end":"Tue, 13 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:5E:B6:FE:3E:A9:63:38:16:AB:57:DA:E0:4F:51:4B:FA:2B:49:43","sha256":"AC:E7:4C:8F:D2:FB:EB:5E:41:DF:BA:9F:C5:FA:44:FB:25:36:FD:A5:BF:21:D1:F5:3B:AF:7D:14:A3:D8:FF:37"}}},"request":{"raw":"GET /api/v3/klines?symbol=BTCUSDT\u0026interval=1h\u0026limit=24 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexionkey.com/\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 1398\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 6f9b0e48-9fdb-4989-b80f-65b3dfccd801\r\nx-mbx-used-weight: 60\r\nx-mbx-used-weight-1m: 60\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 36817f2624d87ea26a28cf9e3afd2402.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: gizWagBX1eqFi4jPDqsYVUj_qGB2C8nyKs1ZCEDILlLpgmSR2mXTUw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4348,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8dfd34e165a765b9869bcb51634c9b59","sha1":"d70d1c7c6fdaee021bfcfca15be839f284c247ae","sha256":"6b7e4b2b4a1f8fe8eda95e06770fdaccf37fa5d2ab60113adaf501a781629428","sha512":"66e4ab745f10a8eb15b234e85627d169e802e5f20bc308766f49047007a8f4e7f0817eff9516c66d3620c756ed0e99a1e822b7f6025343521060b7965be8c3f0","ssdeep":"96:mih9AdcOcBbeWRykwloRvpTF47Dkw+kEN9VYMp6EHigpmCIRskq0R:mih2dcOcpAzuvdFCZ+kEN9VhwEHigpmr","tlshash":"8491b09253888774fd79491d37f1f861656a305aadda1dc045e1e4f748f22728b0cfd2","first_seen":"2025-09-28T21:46:46.805644Z","last_seen":"2025-09-28T21:46:46.805644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/vue-chunks-BYd2Hzn0.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/vue-chunks-BYd2Hzn0.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dbmkISy1Z%2FdhpV38S5czNzq%2F9GtM1GWGeLX3Jzu9RSvKz9OaRo0%2Fx4gKC70mWkeuZTxy1i9r11Ur0AeifjbFghJnHPbun7iSvmKE70EXCnw\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-12c28\"\r\ncontent-encoding: br\r\ncf-ray: 98666eda0ca949c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76840,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (41422)","md5":"eb49242cd339aa37a4cb9e0af427a9ff","sha1":"c859954d51c4a7181e368022dd9411a44b89598f","sha256":"e181f7349fe639058386888ea32954ba2fb0ba7078bcfe77f7cf589d1027f04b","sha512":"71b0ff343a85565692855a20d960ac59e9bc3a4bb122273538a86a03f33ddd7b5738be17d23e858c496cd243e33dbddad1d66123957aefe1e7a6a730dbe711fc","ssdeep":"768:180GJQN2Ee3JhEovnDbqTbWLBrsfcwn13wunX3nO0j1tqD9M5pEftKFBrwik9PK5:/WE/n2D+khQ500Wj6sCFQCjARc5","tlshash":"fc7307e83182b57253fa09e6007b0406f3292d56384ed898f1adaddf3d7640591bbfad","first_seen":"2025-09-19T09:30:35.472732Z","last_seen":"2025-11-06T05:40:50.182778Z","times_seen":253,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.chatway.app/assets/floating-vue-NX6caY_s.js","fqdn":"widget.chatway.app","domain":"chatway.app","tld":"app"},"ip":{"addr":"104.26.3.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatway.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 03:22:15 GMT","end":"Sat, 27 Dec 2025 04:22:13 GMT"},"fingerprint":{"sha1":"A2:D3:90:83:5F:EC:34:90:0D:5F:DB:54:35:22:8C:5C:37:8C:5F:8D","sha256":"F8:50:53:5A:1A:06:6A:79:15:DF:B8:9D:05:5D:16:FD:47:E7:5D:B9:7A:61:3A:EA:0F:DB:E9:43:52:26:A0:3C"}}},"request":{"raw":"GET /assets/floating-vue-NX6caY_s.js HTTP/1.1\r\nHost: widget.chatway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Sep 2025 12:33:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKqXhBv%2F8cj8yi8zlyE%2BTIQRXJodi%2FYiBQdqa%2BBOsv05MhTp7487XtNeVSNoj1ov6rrtmm2OSaJtVXIQ34L0bpjkSDyDTebNf7Db6DnBd68T\"}]}\r\nage: 6163\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\netag: W/\"68d68807-a6a5\"\r\ncontent-encoding: br\r\ncf-ray: 98666eda1cb049c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42661,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (42660)","md5":"4bb12c7a6b49c06ea688f1c9a3cfd2db","sha1":"b5b09f9d82ad0b2c4bd4dcbfe8cc74bc4ecfdde6","sha256":"dbc05aef460412e122f20cb4dc78af2880dc9eba75f45a153e4647d77b10294a","sha512":"507e3449921245c47048705759d5340af50a89e7f8d82f49b32bffdbf74f16a967ac4473afccc94ff8c5c1bf5fc0ffcd8c9d9dc68c2ac7273895fb55016ac6fc","ssdeep":"768:nUz+7n+eTC43ULScUbGyf2J8hrfLdZAY5+mn3Wh8usqu0+fbmzZqflPOrorRtfEQ:UzvfQnAY5PcP+pB","tlshash":"5613fabb7184f13313de95b6503a0609b3261798b40f545cb2fc9bed28b6d14626afbc","first_seen":"2025-09-19T09:30:35.338988Z","last_seen":"2025-11-06T05:40:50.144353Z","times_seen":253,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/css/root.css?v=5","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:18.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/css/root.css?v=5 HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 07 Sep 2025 10:53:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 121572\r\ndate: Sun, 28 Sep 2025 21:46:18 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1462358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11070), with CRLF line terminators","md5":"b6b05a59685a42a3965f683e321d27df","sha1":"361be444a342b8d54863b6d834dcedf3601f1944","sha256":"614627d41eec1b8aa2c48033b8ee188a34f3c6e6f32874e1ff857b3f0ea7a7be","sha512":"3d735bc31e6524befe8fef8641d07c7f2496e7b482daa8b5baf8c6ca0c803803e789479d52146b914619e91ea172dced65e7d61fcab53633154539a731605a2a","ssdeep":"12288:EMlXqMlPMlXqMlXOMlX6MlaMl9lQp+M9MleMl7MlYMlkOMlsMlMMlPMlX7MlXjMw:Q","tlshash":"b62584b7e546140341739a7b9be3a378db7c40278b0160a639eeb5444ff41958ba3e8f","first_seen":"2025-09-28T21:46:46.852986Z","last_seen":"2025-09-28T21:46:46.852986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/landings/1/img/primary-section/01.webp","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/landings/1/img/primary-section/01.webp HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 07 Sep 2025 10:53:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71320\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d50d8c2f1109259595631128a1791e3","sha1":"345cf6eacb9d0a31c175802d422be62311df6bd0","sha256":"99083774a45487892f5fe62cdcc8a6d328c7b0661a1c86d39ac540a47aee0abe","sha512":"aac631d646082c8446b26d4ffe98650e44e68f0b175a0766b212a572c82f34c5ca1ccf729cd04b9ea2e111e190f0a12fc4bc3256eaf6f3778bb36670299907da","ssdeep":"1536:f7daavWXsw9UlCRTxmoy5I9MfPGa0e7euoZtD:fxTvWjU4RFJgHG1g+Zt","tlshash":"0e63019ce1701aa5fd3f69b43ada53de11e13e768a00aff3e6f2861041539b315298cc","first_seen":"2025-06-25T10:39:15.17386Z","last_seen":"2026-03-03T17:46:00.953155Z","times_seen":24,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:23.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nexionkey.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Sep 2025 00:02:26 GMT\r\nexpires: Thu, 24 Sep 2026 00:02:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 423837\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-03T15:27:56.624435Z","times_seen":271604,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexionkey.com/assets/landings/1/img/card/chart.svg","fqdn":"nexionkey.com","domain":"nexionkey.com","tld":"com"},"ip":{"addr":"198.251.83.106","port":443,"asn":53667,"as":"PONYNET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexionkey.com/","date":"2025-09-28T21:46:19.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.devdappsproject.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 18:34:01 GMT","end":"Wed, 24 Dec 2025 18:34:00 GMT"},"fingerprint":{"sha1":"6A:3A:2A:57:3B:9D:00:90:3B:0F:E6:60:BC:4F:E7:CC:DB:23:A2:4A","sha256":"1A:65:79:29:04:62:21:41:69:49:9B:DC:93:FD:7B:E9:F3:4F:53:82:D0:30:22:63:7A:50:A7:E4:8D:62:40:17"}}},"request":{"raw":"GET /assets/landings/1/img/card/chart.svg HTTP/1.1\r\nHost: nexionkey.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexionkey.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 21:46:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 21 Aug 2025 08:56:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 737\r\ndate: Sun, 28 Sep 2025 21:46:19 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11274,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"128b4940aaf5f8fdf8b1cac43b31941f","sha1":"d316ec4805095f38fadbdd72b8b9f59220a9fb23","sha256":"ecb93068f4c4dc2cf04b4ac48e2724016429878a18dc0edb4ac34e0a70982a2f","sha512":"8d3dd655e204edffaa37a304bbec447b40b344946d55227644b1e78349256d5004e46b916ee46b2036db4d2433a48e1b9775c60dc706972eb9fe3077cdba645a","ssdeep":"96:I46ZyRSIGk622hEx0OJ7TLaLCv3bZiPn8kCCgr:VKXzG","tlshash":"a432f891ba645078cb017a9787c91dce101ee4c392e20cdaff50257f25385deaeed26e","first_seen":"2025-06-25T10:39:15.17973Z","last_seen":"2026-06-05T15:12:51.682763Z","times_seen":54,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"nexionkey.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/markdown-it/13.0.1/markdown-it.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://widget.chatway.app/?userId=D6TLgwFrVsa4\u0026widgetId=nkiy18ey8qtgdopfhtbg\u0026bg-color=#0446DE","date":"2025-09-28T21:46:21.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/markdown-it/13.0.1/markdown-it.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget.chatway.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 21:46:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 29336\r\ncf-ray: 98666ed95857b4ed-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62714aac-7298\"\r\nlast-modified: Tue, 03 May 2022 15:30:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 236760\r\nexpires: Fri, 18 Sep 2026 21:46:21 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QTX7G3UWdhPxb1B9jm3oF7jtu%2F%2FcUuOl4yVJ600nhn0l9o7zC%2B2nVQoKMMivbwOroVkk%2FaBrwKSq12yuHP6ulGLM%2Bm7CsbzhblxyZyirQOryFVQX5MI60Ellz0gF7uXkvYAG%2BcnW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103012,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65454)","md5":"2c312733bbc9b162af28c64c8991b3ba","sha1":"9e7644adf7f90a5afd8d60cf2887134ef08fb72e","sha256":"84dca58da83a8220ac8efff22a6c4af3f55e1f3bcc0ef739bbc033991be6d412","sha512":"4987c35183e0e71b29b06e8e3a95d4dfae86f1266c7473a1aa4fe271dad827613f58a6713f1cdeeddd870f70325e94fb536d8f679cbbe31469a99e80d9b27e91","ssdeep":"1536:+WA83I94l3mQiB9JGv18Px6/HpGmqD4JIz3BXUT+3VNb3xzsp4tEHDT8er3Q4A:+WAL6l/KP2H8zcOFLN36C2DQugb","tlshash":"5ba30b5562dfdcab229030d82c7f290da9fe4a42440cc428ffed91eb19a5993315bf76","first_seen":"2023-03-09T23:28:50Z","last_seen":"2026-08-02T07:02:28.560927Z","times_seen":1650,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":8,"dns":0,"connect":2,"send":0,"wait":13,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}