{"report_id":"a9d5fd62-23f3-48b1-9e9d-529c54782e15","version":0,"status":"done","tags":[],"date":"2026-10-04T00:40:10Z","url":{"schema":"https","addr":"globalfundsnexora.ltd/","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":0,"asn":32561,"as":"Aquiryn LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"globalfundsnexora.ltd/","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"title":"globalfundsnexora.ltd","dom":{"size":41931,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (26410)","md5":"a191bcefd50a9a48bb5479ca8ac1a009","sha1":"35c7db2811b0585b9f2d9706346d02192675da4d","sha256":"0022731ee927a419493f73ce1da7326be8434088a4fa3f0a33426facfa15cda3","sha512":"865fdefedc400cf87bfc476b606e4413dfe0ce9498a5fd2b327989d65548a1221ed3280f1f41fd27806e156c7a163537f099604335af4ea7997ab2b73fa84ce2","ssdeep":"768:0yJi2qbCmmWqo8FTbfsTO+hDGqRt8UtN2v3k/SR+D/5km58:FJzqbCmmWqo8FTbfsTO+hDZRt8UtAk/C","tlshash":"5113a7276784452c9c53d278f399b54ea32af688ef6259eef7c23410c2d93ff088a455","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"2026-09-15T08:48:22.617048Z","last_seen":"2026-10-04T09:57:00.767789Z","times_seen":74,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"globalfundsnexora.ltd/","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":0,"asn":32561,"as":"Aquiryn LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-08T00:40:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-10-03T04:04:07.479411Z","alert_count":0,"request_count":4,"received_data":378707,"sent_data":1900,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":6,"received_data":50411,"sent_data":3392,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":6347,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-27T23:35:58.732281Z","alert_count":0,"request_count":3,"received_data":25235,"sent_data":1901,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"3.126.170.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-10-03T05:53:01.607049Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":636,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-10-03T09:16:16.764454Z","alert_count":0,"request_count":1,"received_data":7745,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"63.180.77.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-10-03T15:50:04.771981Z","alert_count":0,"request_count":1,"received_data":1579,"sent_data":545,"comment":"","tags":null,"fingerprints":null},{"fqdn":"globalfundsnexora.ltd","ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-04T00:35:51.731198Z","last_seen":"2026-10-04T00:35:51.731198Z","alert_count":88,"request_count":44,"received_data":938208,"sent_data":25182,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-09-28T22:01:00.454273Z","alert_count":0,"request_count":3,"received_data":2198,"sent_data":1743,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-27T23:14:39.019501Z","alert_count":0,"request_count":1,"received_data":71823,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-09-29T06:54:31.365163Z","alert_count":0,"request_count":1,"received_data":3691,"sent_data":509,"comment":"","tags":null,"fingerprints":null},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-09-30T09:52:40.059403Z","alert_count":0,"request_count":1,"received_data":973,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-10-03T05:53:02.244354Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/bootstrap.min.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecf57f773615b755cf15534f747c0642","sha1":"ed31e2cd663151d6871bae778dcd4bc788d85d3e","sha256":"ecb27879c669b3efe26467e7cc0168d7955b73aa22ca9fe786cc41458566545a","sha512":"e0387bb0be58d3adc45ce0f9632c4537fb12a828df6aa464bd3f7da9aacb8bf96e5189241ee255481dfa21ec27e6edaac4aa9c86d0f3b596e4cd9456591caaaa","ssdeep":"384:c7G0ETBntnRUu9jtzELnSsIoSjglIZEOHQnTAyIo:cBETBntnR39jtz+ntpSOAjHQTAyIo","tlshash":"5c927245b27030a103dfb2a5515f470ab23d6e6e950a807d78aa8dea3e79c483177f3d","size":20853,"data":"","first_seen":"2023-03-07T22:59:03Z","last_seen":"2026-10-04T04:54:35.935292Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/jquery.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"321bd6efc995004e12a2a86ff271d154","sha1":"e2110216f65d19bd2eda842d4f3b21e09b9406a8","sha256":"c9f5ad152eb5e541cc43382e3f67185f6c464c13494213c161810879ef82dc39","sha512":"89b8143d02b76ec94654b443e79a263a9fb3dff55f52a19f8efadc55adb33af471ae8bba9519cc31d8191c9b3526c6e0e2efbbd2adece150c08f57d43886fff3","ssdeep":"1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTdu:fY8MaW2b+UELKTqnAdi2PQl","tlshash":"079309ddb1c5b02287bb70a950af540bf236195e280c4450f268d8f9fc74a4ea27bf6d","size":94789,"data":"","first_seen":"2026-06-08T23:33:03.759429Z","last_seen":"2026-10-04T00:40:17.205508Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/wow.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d1de87eaba3bea986f91e344de80b50","sha1":"ea0576e2063113209103d6439b1d1206980a1e78","sha256":"32e37f075fd1dfd373fe3aaf5f5d56b3902fbcb3ad5b71c72908efa01320c286","sha512":"0a7f0bc6745be84b1763114b05c74379bd42106fa647c55f74dad1f2e9f800eaa4bea3a7447cce8b3f943a6921d3f2f388688559018fbc98bdda2d686c4f5780","ssdeep":"192:+HctamoFfk612qOfHUhafkasjlfri6mTOvN8HzIqfe2omJ0yaMRaUQPyPCrGJ0Iy:cRZmU+GeKrAq6aItnebXh","tlshash":"1162cc893eeb20609717717e8f4f8105b638154b1159dd08beac4be45fa093897fafb8","size":15553,"data":"","first_seen":"2023-03-07T12:06:46Z","last_seen":"2026-10-04T08:22:29.470842Z","times_seen":1149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"81fd21e95304c7fd1b7ce5641187b71a","sha1":"68fe7dce99cdffcfadd698ddbc9933e92bec9034","sha256":"1314f8d65a17e9dab1fc0584d6ff79fc2378fa3508d72a18048aebd2512a8aef","sha512":"8df479d0912e87797870346f77a91e3894f6c3110b94f30b353f7017a83d18b895d2b81373afd2d1c52ce5f766fb54ca7cc9471d7dff0883dde3fa1f2c051823","ssdeep":"","tlshash":"7ed0120bf430111f049ab125e39159cd75788609053e4d28364290cf3db3f9c130d1b4","size":199,"data":"","first_seen":"2026-05-25T20:34:17.740558Z","last_seen":"2026-10-04T00:40:17.337886Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8f3606fc575fd0865f52e3335adfbd0","sha1":"b40bda53e778a150265c98b02b68eef22383e239","sha256":"dcf0524a984cf3617800e0cf132bcb76b9ca2502b63b3dfaac58037020fe9dfa","sha512":"20932b5e33fc306e9c4b3afbf3381353bddec63b7f19aa671302f055ea55078b3c729b6598e7ba95918bc0d94ef2c3adc9e4771f0ed2263e765bab283c06a4ba","ssdeep":"48:1wKpt8rHoBY9L/K5Hvf1GJIvwc6B+wg2ww+h35Jo:1wKptSHaU/YPwg2ww+h35Jo","tlshash":"d5915c14b5b5b0dc243413b1f5bc22263857e9e6f92644022e3e89cb5944b11b5ff9b7","size":4336,"data":"","first_seen":"2026-06-08T23:33:03.877028Z","last_seen":"2026-10-04T00:40:17.346659Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"46e2f7a0d1dc55a8cd889a901524433b","sha1":"8c5d4d36a3217cefb93ab8a1c133f4805a2c6689","sha256":"7c9aff4d36146453f179d6107c46d06de450e131ee09b1fd2d0cc32d040284d0","sha512":"8039c3463bc729c0bc3efdca168e6a1308f14f846bb207be6b9b5097945f31682659975ef024aed0fe44b11758eb42adf55b6ca4983d696d43bda3a78f9bf0bd","ssdeep":"","tlshash":"1be0f13d3c30408057d240f4c1b7e1283e1630240450ce1384e6d82c1cf0fedbd02999","size":416,"data":"","first_seen":"2026-10-04T00:35:58.902103Z","last_seen":"2026-10-04T00:40:17.34889Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.HAYW1-L6Qrc.O/am=RACAAQ/d=1/ed=1/rs=AN8SPfqJ1083OThM0isxIr87jVkDXOLIrQ/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"433afe3e02a1d56fadcefd4d13d84524","sha1":"673e54e652eab8fbd8b765a9dde2f06bffa2e866","sha256":"47a7b1b7b8f6591833815e5696655bb056ba258675e6b6cf06114c22e4112689","sha512":"1d8a3539e29077e9aeccfc1dac86435785ed78e33ee7e72d545d715b35cbe48751bbc8fb0746e807dac1fdcdd9b7dc7737c6eb8b4930bf6a464d5b23f8ee49e3","ssdeep":"3072:KL9aWR+K+zPZCPzb+bk1fRz62/OlDcpBi4unoLd+X9hcxBZoyZR:RzOzvVwIuTKB","tlshash":"d254e8ddb29670b79363f4a5513f004ab13b68a5f8484dacb288d8e26df4909417bf7c","size":292791,"data":"","first_seen":"2026-09-30T20:05:52.524537Z","last_seen":"2026-10-04T09:29:22.223127Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-10-04T09:57:00.774399Z","times_seen":9814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Ci3sulf9.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eba624c042df6b9ab614a422c182dc2","sha1":"c66297b197c51aa94b92a9066905bfa42e2e4c8e","sha256":"42d5bb3c366ad7621e46bc942f3009ee1ea1452c905fbbdf4f1d5c3f3220d09f","sha512":"3ab1e42fcdcbe0766b7f5eb07cb796550733ad5fc7dd65ef0657fe4fdb3c73fa94ed5ad19ee8111146f92dffbe72c2c9efb42c5eaa247f449db0050510d21682","ssdeep":"384:FNtFT88tMPdBgaw5O+mvRan7/AKsDoKzwA3Q+crsbUzgfTtQfQIeI+:FNtFX+dBgaw5O+aanrkoKkA3Q+cwbUwx","tlshash":"da72f9741210743f712fac492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-09-24T09:31:55.036956Z","last_seen":"2026-10-04T09:57:00.771466Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-C4Ptsyox.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b36d702e3e683b008b927b0c9b96bdf9","sha1":"ba9cc05993bba55735f2b82da0acb0831b437f4e","sha256":"f48e6ef3e5251ec45c426e1a44d7bc9bf044833a5a7eb2a9e7ab9237cbaf8c0b","sha512":"460d078654a42b5b6feae064b44e20a4c73d3d520253af8ec9d22113dbbce26c12009f1674cda006a3102fe4cdecf5a86eb47c45cf7d119b549422a84ecc8b7a","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY9y2KQgcu5UUxtvmB0:cOEIqXrP3nJwar/KqvmB0","tlshash":"c6642bc57290b03543d791a6906f1109b33a5c18580d812cf269edf67dbaec8b2b7fb9","size":322001,"data":"","first_seen":"2026-09-24T09:31:54.987317Z","last_seen":"2026-10-04T09:57:00.804037Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/setting2.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"217344b441c87abcb261fd7571e88256","sha1":"26ae41f26b8cc89f7d109f6ac78ef3b9037023b3","sha256":"f5cf835977b2e0e031f98533a4411784a4865d8721d9dafb797340f2eba8f3b4","sha512":"3c76356435c86d97539eac52def13a2db2c51d901999fa756fa36cfb7388451cac3048b3059b160837722f5f89bdcae3f8d78c348f4c02d99b79389a14c25fe7","ssdeep":"","tlshash":"7e112845f1d740915177723c4a1b60053da76c1b269ccdb4b52c46c83fd8e1c9a3af0c","size":860,"data":"","first_seen":"2026-06-08T23:33:03.799093Z","last_seen":"2026-10-04T00:40:17.129544Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/wow.min.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-10-04T09:21:30.003888Z","times_seen":14922,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/calculator.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81d85bfb208f87a8de62694364d4b8a9","sha1":"1862e00e58adf6f41581a738b8b50590bd4f7dd9","sha256":"bae4f37b5e300e70e2db0dc9ae24cea6e31cb33c286574dd2f89fff21ab1b17c","sha512":"b8388ba97722e19c3c698450d529475cdf3f5ed14429f77609a2023abd1908319a40949c069edf84b732b2deec48f40ea3b2f955eb432b16073b0c7d9d3a6713","ssdeep":"","tlshash":"5731e950e71e53617230b26438ea12c9b47e496239a05c97bdb11dcc88f0f65a64decf","size":1495,"data":"","first_seen":"2026-10-04T00:35:58.873464Z","last_seen":"2026-10-04T00:40:17.001689Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c4c9f0ac2a3be26df6244c46c8390b31","sha1":"d7856dd415fed340c8abf0b2a264d8c611683e24","sha256":"846368a6587ebf7d0b25a8db6101e8f3ff8690376743535548ee688865bbe1aa","sha512":"164bb9e5ff7298df836e1ca6e23a5fd1a7c31b0034c84497f7b28dc5256ffdc0035b53fe3c98cc1aee1954ee3f747ec1a9f9f253bd9d66a55eaeecf5e84649fc","ssdeep":"","tlshash":"71a0228fb2e23a0333022020c32f08c3e30a3002002ce003e0a2c000aaa82ae3030c8a","size":74,"data":"","first_seen":"2024-08-20T12:18:59.479373Z","last_seen":"2026-10-04T00:40:17.360613Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eee9667a1528ca82a47e04c11469715f","sha1":"c1fa7b4c3f0dfe8624b04ea55e726987eedffc83","sha256":"baf71e6e718afd9965e743c402a7ec24853a4951ab9638bee46d2dcb24eba662","sha512":"bb4daf68cfde30d7adf3792ba52c4a962bfd6a152070022a18f15ea60b41722bfa05a7b542a16148353f76f007bce090e7c5e7fa28e35e4b8d5cbf90397fe619","ssdeep":"","tlshash":"c351f19a88b6d0dac4436c2acfef527922444037ec21dce5bedcd902bfb050ab60d9d4","size":2990,"data":"","first_seen":"2026-10-04T00:25:00.362888Z","last_seen":"2026-10-04T00:40:17.194162Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#156","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d58d2f809dc4558f7979b4b8518a6667","sha1":"b4d1c5ae209545efb205d96173d6fc8bacc98ce3","sha256":"47a923b791704dde6f030f78434f0d2c366c49a193ce0e0db1d21f2ad1024a9d","sha512":"b6da284af3a2df82bca14b0aff970887c79822e8f4490d2821524c27c348ecb9db000e516c214131a8a650ff357ba1bff75a1632676f4dabe716b324ec4a81b2","ssdeep":"","tlshash":"c63167cdbbb7e0594275209a992f820bf13a25b7881cd050e164c8d0fc70e9b407ee14","size":1721,"data":"","first_seen":"2026-09-02T12:53:06.265195Z","last_seen":"2026-10-04T06:37:21.891817Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"WOW: animating \u003cdiv\u003e","filename":"https://globalfundsnexora.ltd/styles/setting2.js","line_number":23,"column_number":19},{"level":"log","text":"WOW: animating \u003cul\u003e","filename":"https://globalfundsnexora.ltd/styles/setting2.js","line_number":23,"column_number":19},{"level":"log","text":"WOW: animating \u003ch1\u003e","filename":"https://globalfundsnexora.ltd/styles/setting2.js","line_number":23,"column_number":19},{"level":"log","text":"WOW: animating \u003cp\u003e","filename":"https://globalfundsnexora.ltd/styles/setting2.js","line_number":23,"column_number":19},{"level":"log","text":"WOW: animating \u003cp\u003e","filename":"https://globalfundsnexora.ltd/styles/setting2.js","line_number":23,"column_number":19}]},"http":[{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/custom.css","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:34.867Z","timestamp":1791074374867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/custom.css HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 10106\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55507,"size_decoded":10418,"mime_type":"text/css","magic":"ASCII text","md5":"c552868863ef3e762eb42c3770a0b637","sha1":"b16dbdb64cb43018628052c3ee6d7c9a9a5a3898","sha256":"3580364f5ee11ebeb24d6616b2c570cd1402e288d70f69bd1dd21dbe2113961d","sha512":"f3703648fe553064f3ba629068ba32672649fbfc6099f8104e17adcb5b8ad03620362df60ba361da2665b74d915835c3bf3cd736fc71d0d09e7663a011c024ad","ssdeep":"768:Z+yI3me6P8faIEkg+g5DxY8f01gysUXj9vQK5q35Cn+cd91vbm54:Z+6g/Hpy8GyFjpq3kd9pbm54","tlshash":"1a436357ab532845f81ae4acafa65fa5234d5043980fce7dba84716ccf841e492b3f4c","first_seen":"2026-10-04T00:35:58.81992Z","last_seen":"2026-10-04T00:40:16.941649Z","times_seen":2,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":789,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/cert.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.144Z","timestamp":1791074375144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/cert.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19203\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19203,"size_decoded":19469,"mime_type":"image/png","magic":"PNG image data, 203 x 296, 8-bit/color RGB, non-interlaced","md5":"4b372c511a46bfd2ab943f15b2ca87eb","sha1":"3ebdeab3d1c0e04e80cd3305a05837136e3d46a4","sha256":"42e47775e68dc766ae74d5fd384a01f8a84d34ca94494b3c7ac7907f0ceee2bd","sha512":"6f8120a66e436548ff765560e957dd3a2238007814bfcfa21922ab0001c64ae0d4aba218546b269ecc09ded87724b5ab6d6d74506e9a27de5562a4c80d015b7a","ssdeep":"384:S+Q7z2w2u5fDSFhRkCNPfH71toZVWHmdOCkC49nHztXnp4uuMjt:cZ5gJpoZkHmdHMnHlnp4HMR","tlshash":"dc82c146f38acc1323bfdb3249fa5d16ccc55029873ecd0a3ea605658666971db81acf","first_seen":"2026-10-04T00:35:58.83896Z","last_seen":"2026-10-04T00:40:16.946708Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3183,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.870Z","timestamp":1791074375870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 00:39:39 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6aa92cf9-4668\"\r\nexpires: Tue, 15 Sep 2026 11:39:16 GMT\r\nlast-modified: Tue, 15 Sep 2026 11:33:13 GMT\r\nx-77-nzt: k6m+BolHtxPmam7CVJ/mRzxVCPRLRsKR91oTC26gY4jSCQDxaxWwQY6LRpfKqDB36dxIhiE\r\nx-77-nzt-ray: fdb541236a8e503e70a0c16abcc2cb06\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 23\r\nserver: CDN77-Turbo\r\nage: 33\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6051,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-10-04T09:57:00.774399Z","times_seen":9814,"resource_available":true,"data":null}},"time_used":3244,"timings":{"blocked":0,"dns":33,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-C4Ptsyox.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:42.645Z","timestamp":1791074382645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-C4Ptsyox.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 00:39:42 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6ab4ecd1-4e9d1\"\r\nexpires: Fri, 24 Sep 2027 09:27:50 GMT\r\nlast-modified: Thu, 24 Sep 2026 09:26:41 GMT\r\nx-77-nzt: k4A2LYLKcR/hHmP29CnlKTmnul76rDgf+tMFkKN1zSmJYBH2+1ZmlPMjIChsTwmWyU1pUq8\r\nx-77-nzt-ray: e2f75420a13f146273a0c16ac1fcdd26\r\nage: 832312\r\nx-77-cache: HIT\r\nx-77-age: 832273\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":322001,"size_decoded":107698,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"b36d702e3e683b008b927b0c9b96bdf9","sha1":"ba9cc05993bba55735f2b82da0acb0831b437f4e","sha256":"f48e6ef3e5251ec45c426e1a44d7bc9bf044833a5a7eb2a9e7ab9237cbaf8c0b","sha512":"460d078654a42b5b6feae064b44e20a4c73d3d520253af8ec9d22113dbbce26c12009f1674cda006a3102fe4cdecf5a86eb47c45cf7d119b549422a84ecc8b7a","ssdeep":"6144:vJj+OEIL+XrPQKKjhetJS9KY9y2KQgcu5UUxtvmB0:cOEIqXrP3nJwar/KqvmB0","tlshash":"c6642bc57290b03543d791a6906f1109b33a5c18580d812cf269edf67dbaec8b2b7fb9","first_seen":"2026-09-24T09:31:54.987317Z","last_seen":"2026-10-04T09:57:00.804037Z","times_seen":195,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/wow.min.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:34.872Z","timestamp":1791074374872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/wow.min.js HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 2772\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8415,"size_decoded":3011,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-10-04T09:21:30.003888Z","times_seen":14922,"resource_available":true,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":890,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/plan-arrow.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.149Z","timestamp":1791074375149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/plan-arrow.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 653\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":653,"size_decoded":917,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a7a10d525d838fc7febc61ae26566c72","sha1":"5b6cf4d09196ab0e192945074f8010d084dbc2d9","sha256":"9977849c2d9a4e6c3f055c37e9587e001f85ae3679da9d5f9dc2238d8dc448f1","sha512":"2e307edb3ee67c5d122955b46faec807b5f0d1ca670d7d3ec5f356b8cd788b1e802439cdacfc198076ba677d55bdb2b85875ad14af0a5a0200a7030d277a0d1a","ssdeep":"","tlshash":"fcf068ec416a0523cd6a5ea311ea42a836c3c2c4c17b33fdba14f01663e05b4efb4b85","first_seen":"2026-06-08T23:33:03.785938Z","last_seen":"2026-10-04T00:40:16.967725Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/security5.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.156Z","timestamp":1791074375156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/security5.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3839\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3839,"size_decoded":4104,"mime_type":"image/png","magic":"PNG image data, 206 x 77, 8-bit/color RGBA, non-interlaced","md5":"60a27458bcf585be399d283ce4fa0a1a","sha1":"26fa8dffc7f949944ac5b3e18bc5ad519b2497b6","sha256":"b7674051fa7b3ec122d6f459f31f7a43dabfff990966c6e324cf23195910b67e","sha512":"1ced407f2db48cbf1f2909456513019c6d44d8b7f0945077413caed1c2b32af1d850fec9080e563b3d4d33a08a3f9fc405d173a6600d11a51149ae2f37e8d24e","ssdeep":"","tlshash":"12816d6f021650bc06866696ad538fc49ae185cf2fa05a3de1237af906f47e100b5f9f","first_seen":"2026-06-08T23:33:03.756065Z","last_seen":"2026-10-04T00:40:16.976492Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/logo-foot.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.159Z","timestamp":1791074375159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/logo-foot.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3946\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3946,"size_decoded":4211,"mime_type":"image/png","magic":"PNG image data, 248 x 44, 8-bit/color RGBA, non-interlaced","md5":"da8d9bb9a5352b9961a3f31c5bdae464","sha1":"a8d5b64900a3c0eebf753c30b8cd6471b774d332","sha256":"beb50a068958f728ba95ba310d242cde06cca4b3254efa7d8b7d6d293e9881f8","sha512":"7d064183960f28f90c1b586a2321a93b2eafb0cb56db454bcc3ef0b029420705437f3712703280aea1ecb3c780072f9650d6c31d6685af2018ec5c8986f8e8b2","ssdeep":"","tlshash":"71815c0fb912585015c7fa94add078aa9e236f5084cdd147fde99427c0a05f6e40d9aa","first_seen":"2026-10-04T00:35:58.818421Z","last_seen":"2026-10-04T00:40:16.986407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.918Z","timestamp":1791074375918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:54:47 GMT\r\nexpires: Tue, 28 Sep 2027 15:54:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463488\r\nlast-modified: Mon, 15 Sep 2025 16:35:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":8652,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-10-04T09:41:28.475621Z","times_seen":85278,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/calculator.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:34.875Z","timestamp":1791074374875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/calculator.js HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 509\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1495,"size_decoded":747,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"81d85bfb208f87a8de62694364d4b8a9","sha1":"1862e00e58adf6f41581a738b8b50590bd4f7dd9","sha256":"bae4f37b5e300e70e2db0dc9ae24cea6e31cb33c286574dd2f89fff21ab1b17c","sha512":"b8388ba97722e19c3c698450d529475cdf3f5ed14429f77609a2023abd1908319a40949c069edf84b732b2deec48f40ea3b2f955eb432b16073b0c7d9d3a6713","ssdeep":"","tlshash":"5731e950e71e53617230b26438ea12c9b47e496239a05c97bdb11dcc88f0f65a64decf","first_seen":"2026-10-04T00:35:58.873464Z","last_seen":"2026-10-04T00:40:17.001689Z","times_seen":2,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/security4.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.155Z","timestamp":1791074375155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/security4.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8009\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8009,"size_decoded":8274,"mime_type":"image/png","magic":"PNG image data, 125 x 77, 8-bit/color RGBA, non-interlaced","md5":"47fe359a02918ab894884021967ca5e5","sha1":"6365928b712873774d44188e1fc6b352e3a6f918","sha256":"ef0d25c85a3497cd1c5408f64029a8271309b760424638ae8ddd3c7ec6ea8432","sha512":"40ab8045ec5295d96a7025815fa10e807219213f453c9091c4bebd8ccdf5b26cbc02d91cf65ff92378d40f35552bb6008525e699ee1f6a23245976f0ae7e0c6c","ssdeep":"192:d6KVuBIOYXTibVFBHQMhLLJ85wLz7ppNGPa3tRgdN9tLZF:oKTjiHhLJ85iFpES3/aZ7","tlshash":"5cf17db1fc4d7698e59b08f63382031995332248d68744fe5070c119f6bda61badf269","first_seen":"2026-06-08T23:33:03.752035Z","last_seen":"2026-10-04T00:40:17.01481Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1560,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/stats-bg.jpg","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.885Z","timestamp":1791074375885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/stats-bg.jpg HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/styles/custom.css\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 145447\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":145447,"size_decoded":145715,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2020:02:16 23:17:48], progressive, precision 8, 1920x970, components 3","md5":"4a15d61b5f3d8b8b89474e0ff6c13a15","sha1":"ea3077dbba57809e29ccd5dd3da790daa9b58e30","sha256":"c846852f66e734e28e46333c47a46d7a5a512f4b4d69c98c2398b2ae61ffa560","sha512":"c0413c379faa2d096d2b314315b7c7dbd5afb567ded473f357977556caef00d5f35d37a8c4356f61ca11aa1c3123a2ec1e588098cbc968aff218a033eae0691f","ssdeep":"3072:2MmiWoVGSD73A8SborY4HdF0XGmGJWBD+ltJW9J04hWEu0UdKqzK:1nVG47QHgvWBDOJqQjzK","tlshash":"37e31252afa1ac61f2f20fb84072dbc2a6356935bbf32ac1754db651fb113820d5d283","first_seen":"2026-06-08T23:33:03.768211Z","last_seen":"2026-10-04T00:40:17.028431Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1589,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1254,"receive":335,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/favicon.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:38.473Z","timestamp":1791074378473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/favicon.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1421\r\ndate: Sun, 04 Oct 2026 00:39:38 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1421,"size_decoded":1686,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"33f89b7c7567a790203293aa6d66b848","sha1":"68bfffbb5b6db345737cb6ed898e44b07674a64f","sha256":"4f3777a99d0de99401dd327e90aa50bfddff7eb57851e95b91822b0409295370","sha512":"37f60df8715b2efce30fec37ee07d02a66e16709fa2b8c9d5e6962881ed28ecc190bf6a76de3efba0d141255dcd82cc10a13ae06a8344267176d643a9b7b76d5","ssdeep":"","tlshash":"cc21e9feedd40d455dbe194821c8503114c7c9b49a2d0ff4982ae068ff3499479d850e","first_seen":"2026-06-08T23:33:03.739547Z","last_seen":"2026-10-04T00:40:17.046571Z","times_seen":5,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:39.288Z","timestamp":1791074379288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 00:39:42 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6ab4ecd1-891\"\r\nexpires: Thu, 24 Sep 2026 09:33:15 GMT\r\nlast-modified: Thu, 24 Sep 2026 09:26:41 GMT\r\nx-77-nzt: k7nBP7x6BoYXwlg1Kf8Mu3wCOBJU096xlYHUb2ViZ0QBbjOXusX7NDdLQywYi3lB8LSRic8\r\nx-77-nzt-ray: e2f75420a13f146273a0c16a32ac1a24\r\nage: 3\r\nx-77-cache: HIT\r\nx-77-age: 734\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1038,"mime_type":"application/json","magic":"JSON text data","md5":"12c6716ff3ab953322bacd460252db22","sha1":"15813d602fcf091b0ac305e50a8497debbf87c96","sha256":"e9445ab5e907bf30755143459b61f7f8d7f12d9b8ab3fdc0148ba9ca47556c1f","sha512":"f7b1e9ab71475a9559e324afcdb5f262b3e2d20ca2cb171a9e1a1750461f7c0c24c376b7714ce7d936c5dcb5f41ed789398ab5503e1754435c3c3cfbfd11b5ca","ssdeep":"","tlshash":"75411693c0f80d431b8c652bb89589415d9083c7acc93d1d366d9a7f2f4ceaa10e67bd","first_seen":"2026-09-24T09:31:55.04595Z","last_seen":"2026-10-04T09:57:00.80334Z","times_seen":196,"resource_available":true,"data":null}},"time_used":3344,"timings":{"blocked":-1,"dns":33,"connect":8,"send":0,"wait":33,"receive":0,"ssl":3270},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/bootstrap.min.css","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:34.860Z","timestamp":1791074374860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/bootstrap.min.css HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 15693\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97219,"size_decoded":16063,"mime_type":"text/css","magic":"ASCII text, with very long lines (65366)","md5":"702b2ed4bff97da96915beda7bcae2c2","sha1":"4d6d5d5c4e51707fd745da9d0b4d261bd404ec05","sha256":"6814b43128109ab0b8abc73834fb43b5adbf16666c38467d7f2b0f7488451ce1","sha512":"0d4588dbfc39ac185a19e207e95f34ff2b242ec592fd8f93dff8fa30bd8a361e55b634c9f06f7c0a3134c14703c9319a13f29219e63292a041b3aa89b602179c","ssdeep":"768:pBp0f3jbVPXYt3jGxwfsh0RTa3b+bmoWAC/pm0ZkhccFeQJaW:puFXYt3QwRReDoNASccFt","tlshash":"9193c7a0f11031da7223c65a71d0ed873259b092e5664fb7f26f29d88f856ca0663f1a","first_seen":"2026-06-08T23:33:03.794809Z","last_seen":"2026-10-04T00:40:17.063776Z","times_seen":5,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/logo.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.129Z","timestamp":1791074375129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/logo.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3946\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3946,"size_decoded":4211,"mime_type":"image/png","magic":"PNG image data, 248 x 44, 8-bit/color RGBA, non-interlaced","md5":"da8d9bb9a5352b9961a3f31c5bdae464","sha1":"a8d5b64900a3c0eebf753c30b8cd6471b774d332","sha256":"beb50a068958f728ba95ba310d242cde06cca4b3254efa7d8b7d6d293e9881f8","sha512":"7d064183960f28f90c1b586a2321a93b2eafb0cb56db454bcc3ef0b029420705437f3712703280aea1ecb3c780072f9650d6c31d6685af2018ec5c8986f8e8b2","ssdeep":"","tlshash":"71815c0fb912585015c7fa94add078aa9e236f5084cdd147fde99427c0a05f6e40d9aa","first_seen":"2026-10-04T00:35:58.818421Z","last_seen":"2026-10-04T00:40:16.986407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/arrows.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.132Z","timestamp":1791074375132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/arrows.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 456\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":456,"size_decoded":720,"mime_type":"image/png","magic":"PNG image data, 28 x 14, 8-bit/color RGBA, non-interlaced","md5":"12e6d1c84d7873d832c41f29ffcf9703","sha1":"2d593655e9c9f1f8614675b1bd82ba96af9689af","sha256":"a554d16b671a175e6560c818f406dbf76d0b7ade38c9115fe3915438aee80379","sha512":"39daa21c43b7647cef597170f64088153a277655675947ed4537bc5fa1c373524b6a45df04c4febb48a37e0f4b0e1f4ca5c0ce1930430c503a518aef99331fc0","ssdeep":"","tlshash":"5af0dcddfec9ca188282836208c58e73990018fe625f433c1f578c5620e82d0d8cc5c6","first_seen":"2026-06-08T23:33:03.747801Z","last_seen":"2026-10-04T00:40:17.078575Z","times_seen":5,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/security3.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.154Z","timestamp":1791074375154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/security3.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4050\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4050,"size_decoded":4315,"mime_type":"image/png","magic":"PNG image data, 160 x 77, 8-bit/color RGBA, non-interlaced","md5":"93cc6d9e74370f06ff27c6872bcbb16e","sha1":"fb549e2e65b194198a1466904c9bf26f7dc8bc8b","sha256":"003822ca465b37738ef51e71e8c33457a7d35943ed4da785c82c7e3dcf26a0b9","sha512":"8fe9d380caeb9887403b1ada4b1ca0a53fdcbb4c146f470bdba11473c00e7f1b994ec2bac4343b8f29f4498bbaa5e3a6ed3c2ac4b88cb0dea63b9396ca1e08c4","ssdeep":"","tlshash":"11815cf4b8b18a2c7f898835c9b813855e7be42068114a4dbeb3cf358e8c795f99504f","first_seen":"2026-06-08T23:33:03.76195Z","last_seen":"2026-10-04T00:40:17.08796Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1645,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:38.615Z","timestamp":1791074378615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:31 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463627\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":4178,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-10-04T09:29:11.680433Z","times_seen":99132,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/bootstrap.min.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:34.873Z","timestamp":1791074374873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/bootstrap.min.js HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 5557\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20853,"size_decoded":5796,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20683)","md5":"ecf57f773615b755cf15534f747c0642","sha1":"ed31e2cd663151d6871bae778dcd4bc788d85d3e","sha256":"ecb27879c669b3efe26467e7cc0168d7955b73aa22ca9fe786cc41458566545a","sha512":"e0387bb0be58d3adc45ce0f9632c4537fb12a828df6aa464bd3f7da9aacb8bf96e5189241ee255481dfa21ec27e6edaac4aa9c86d0f3b596e4cd9456591caaaa","ssdeep":"384:c7G0ETBntnRUu9jtzELnSsIoSjglIZEOHQnTAyIo:cBETBntnR39jtz+ntpSOAjHQTAyIo","tlshash":"5c927245b27030a103dfb2a5515f470ab23d6e6e950a807d78aa8dea3e79c483177f3d","first_seen":"2023-03-07T22:59:03Z","last_seen":"2026-10-04T04:54:35.935292Z","times_seen":105,"resource_available":true,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":905,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/payment4.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.136Z","timestamp":1791074375136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/payment4.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1816\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1816,"size_decoded":2081,"mime_type":"image/png","magic":"PNG image data, 34 x 35, 8-bit/color RGBA, non-interlaced","md5":"2f5d6b988de1619cc05770e86ce1672e","sha1":"7769af7ca5a1a4229c192b4ec074ce01b2b1fc14","sha256":"96e1575c946fa37abe2b97491e9e8f1644cb326a56dcccc8182589429ee422be","sha512":"ee7e5052d3549bf51ed40e9c9cfde372b3b1f23be98458cde9e4fbfeb06d269e13940820193954abdfd4b0e8fe2a95c6e60ce3c90a25aaaadd5a7408cda4eef8","ssdeep":"","tlshash":"de31e9f26fc38e14ae6c2f007669455241e55b957f122ff95077d0ae5365fb40ef0902","first_seen":"2026-06-08T23:33:03.772556Z","last_seen":"2026-10-04T00:40:17.11072Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/payment6.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.139Z","timestamp":1791074375139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/payment6.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1503\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1503,"size_decoded":1768,"mime_type":"image/png","magic":"PNG image data, 32 x 35, 8-bit/color RGBA, non-interlaced","md5":"d68d24cbeaf0e8e29b7cad04e5a64f9a","sha1":"067520edb94a75abffac665ae8af5286cd260a22","sha256":"0af4fab0cfcf4a38eb4c40991565411b3d5cdd1863dcabb3c78b70777595339a","sha512":"f801c05d8c8092f8d4993da02c259653ba6ef93d65323e775bb1d27a55675dbbded38e8d9e8c074d2d2c10f25525c587310c9157fd38d0c9aa546c6218480579","ssdeep":"","tlshash":"bc31077273eacae5a3e31678d25a549cb550c630ce006b2f108a44968b40238c1ea7bb","first_seen":"2026-06-08T23:33:03.781656Z","last_seen":"2026-10-04T00:40:17.113414Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3188,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/payment7.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.160Z","timestamp":1791074375160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/payment7.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 737\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":737,"size_decoded":1001,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"57604c9b780c51de1104b67576b3d009","sha1":"d30e071a752628ec89604d7b14b340af44d8530d","sha256":"2b3dd6592c713277d5ff42a0ee6f486f4218f4156d6de27496f9d4d350d61e69","sha512":"1da13e9558bf2746fa888c5bddac37291cdf7c92e96c0beefe41a1c2840913c738d9cd2d5a700a22296f74fcc9856e9942300dfca6d57232ab72fa0c6dd0f75e","ssdeep":"","tlshash":"360165cd82196f680128cbe022f508c4f1e29e08d56f7794f80be4171f6656c8a89bcc","first_seen":"2026-06-08T23:33:03.790105Z","last_seen":"2026-10-04T00:40:17.115914Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:300,400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.678Z","timestamp":1791074375678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css?family=Poppins:300,400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 04 Oct 2026 00:39:35 GMT\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5663,"size_decoded":1233,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f82781add8b0a30e4fc3d646c380c9c4","sha1":"1dd46a231da58ae125e566896e0ec58ef53ffa9e","sha256":"d16359174cd8f614201a13089e8ada35bb31aa1b17a2ec2883f58b947e11adcd","sha512":"16f463da69105b6cea278bb4b05b7686601e6be1c9423a0764cac0506bde6e65cef8206a8b6c984f8b0e65cee0a666cb9cbbb04025bfc52415feec29f31ff8a9","ssdeep":"96:SOWrOWTJc+ukOWaN3OLnOLCJc+ukOLuN3Og3OgvJc+ukOgON3OxTcOxTUJc+ukO1:KjH/dCKSe1rV3HwwVzzbZ","tlshash":"a0c18bd2087be41467831cc222ce7d36ef0ea244b450e574abfe0c98ada7c69537272d","first_seen":"2025-09-17T09:41:57.591734Z","last_seen":"2026-10-04T08:50:29.279156Z","times_seen":7918,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":15,"connect":27,"send":0,"wait":33,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.913Z","timestamp":1791074375913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:37 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463618\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-10-04T09:29:09.711853Z","times_seen":413369,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":1,"dns":0,"connect":28,"send":0,"wait":20,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_a/l?client=te\u0026display_language=vi\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"moz-nullprincipal:{1c7b37cf-5692-4aab-8116-56531ac7b14f}?https://globalfundsnexora.ltd","date":"2026-10-04T00:39:38.659Z","timestamp":1791074378659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /translate_a/l?client=te\u0026display_language=vi\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 04 Oct 2026 00:39:38 GMT\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-5frjflQnWLKUzUqlE-QmUA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport\r\ncross-origin-opener-policy: same-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccess-control-allow-origin: *\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw1JBiEOLhOHWg7RqbwIGDm54xKSkl5RfGlxQl5hXnJJakFqcWlaUWxRsZGJkZWBpZ6hkYxRcYAAAnYBL3\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-04T09:32:38.525077Z","times_seen":18823076,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.914Z","timestamp":1791074375914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Oct 2026 16:10:23 GMT\r\nexpires: Fri, 01 Oct 2027 16:10:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 203352\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-10-04T09:27:06.344245Z","times_seen":294400,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/setting2.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:34.869Z","timestamp":1791074374869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/setting2.js HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 409\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":860,"size_decoded":647,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"217344b441c87abcb261fd7571e88256","sha1":"26ae41f26b8cc89f7d109f6ac78ef3b9037023b3","sha256":"f5cf835977b2e0e031f98533a4411784a4865d8721d9dafb797340f2eba8f3b4","sha512":"3c76356435c86d97539eac52def13a2db2c51d901999fa756fa36cfb7388451cac3048b3059b160837722f5f89bdcae3f8d78c348f4c02d99b79389a14c25fe7","ssdeep":"","tlshash":"7e112845f1d740915177723c4a1b60053da76c1b269ccdb4b52c46c83fd8e1c9a3af0c","first_seen":"2026-06-08T23:33:03.799093Z","last_seen":"2026-10-04T00:40:17.129544Z","times_seen":5,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/wow.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:34.871Z","timestamp":1791074374871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/wow.js HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3540\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15553,"size_decoded":3779,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6d1de87eaba3bea986f91e344de80b50","sha1":"ea0576e2063113209103d6439b1d1206980a1e78","sha256":"32e37f075fd1dfd373fe3aaf5f5d56b3902fbcb3ad5b71c72908efa01320c286","sha512":"0a7f0bc6745be84b1763114b05c74379bd42106fa647c55f74dad1f2e9f800eaa4bea3a7447cce8b3f943a6921d3f2f388688559018fbc98bdda2d686c4f5780","ssdeep":"192:+HctamoFfk612qOfHUhafkasjlfri6mTOvN8HzIqfe2omJ0yaMRaUQPyPCrGJ0Iy:cRZmU+GeKrAq6aItnebXh","tlshash":"1162cc893eeb20609717717e8f4f8105b638154b1159dd08beac4be45fa093897fafb8","first_seen":"2023-03-07T12:06:46Z","last_seen":"2026-10-04T08:22:29.470842Z","times_seen":1149,"resource_available":true,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":816,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.109Z","timestamp":1791074375109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1013282\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:12:09 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktrsStN9i3uylS9pBZc9WbpeGZemRCM9JuFgEr0bxfVEDy7hlCtU9ODi7z5KmbM8lhLhmrM6HOgybw%2BNlRrOa13jhP%2BXcHF%2BYkpR3zcq1DNQXTdb%2FSjr5XXciIWbG%2BirUus3saIT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a450215c9bce56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5845\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70815,"size_decoded":6853,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9365fe85b7e4db79a87015e52c3db6c","sha1":"2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9","sha256":"dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56","sha512":"ad142d178576c2d02f5eca2ee22500b369171e2dcb8fd344ef1251efb0c4ec61ecc6063d4535b2f77773317803206f13a224530f8e55b0335d4e251a80e15e64","ssdeep":"768:/KvcqyF7I4rb84dLM+JKvcqyF7I4rb84dLM+k:B/nLMu/nLM5","tlshash":"40631be8e80900d26fb1cc03ef62b7ca1685f0a3f9d10dd8f17a998c29d16551597fab","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-10-04T07:04:42.895931Z","times_seen":11103,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/payment5.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.138Z","timestamp":1791074375138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/payment5.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1715\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1715,"size_decoded":1980,"mime_type":"image/png","magic":"PNG image data, 32 x 35, 8-bit/color RGBA, non-interlaced","md5":"222e79a5cfb1b621dd9fe86782cc2ef2","sha1":"9633e7901e777f91b5a5fe1dc2cc61cded32f56a","sha256":"226632bdd18ea903ecaa67e1c2751eff9aa73e23533a97cfb0d9d67d3eab08d9","sha512":"4ea2112935b45480a070d0112983cbdcffa87606e6c1501d584d85f71db6c98d57bd370295494154388ef9828109c29e04894d8d7254e282bc0c537e42d699f6","ssdeep":"","tlshash":"ae31d8c8d8c272edd76f56607e821930bf6598dd4654803d32449ea64da90066c3b16c","first_seen":"2026-06-08T23:33:03.793841Z","last_seen":"2026-10-04T00:40:17.137711Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3189,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/aff1.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.157Z","timestamp":1791074375157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/aff1.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18541\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18541,"size_decoded":18807,"mime_type":"image/png","magic":"PNG image data, 149 x 151, 8-bit/color RGBA, non-interlaced","md5":"86b1a7ddb16795bdc1638800ed8569db","sha1":"ffb3b2929088fe9b23d28ca05ba1fc8a83be5dd4","sha256":"d297910616ec07ace3685899b4e740451ad478633a6e8d84e2033467d5a01cec","sha512":"fc84dfa3fac2249f06f0aed8236446d595110db6d59f13c02469766f8616670783621649fc419578eaf58c7de8c0b5d1dac8ab76dec8648057307c25c1300080","ssdeep":"384:pcfqVh25HBsTLBkRY8Lz/K9UOP/Aj4WEHD/yuGd15vlPhkJUW0nsDG:peqPfUTK9UOP/mBEHDt6J5kg","tlshash":"1182d12da9ce3673accc4fdd9b40b8ae1c2340750f12be4f6a499425b42ed9bc757285","first_seen":"2026-06-08T23:33:03.801248Z","last_seen":"2026-10-04T00:40:17.142585Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1363,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:38.616Z","timestamp":1791074378616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 30 Sep 2026 20:17:21 GMT\r\nexpires: Thu, 30 Sep 2027 20:17:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274937\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":1583,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-10-04T09:24:41.062012Z","times_seen":75516,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-Ci3sulf9.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:42.644Z","timestamp":1791074382644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-Ci3sulf9.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 00:39:42 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6ab4ecd1-3e9c\"\r\nexpires: Fri, 24 Sep 2027 09:27:50 GMT\r\nlast-modified: Thu, 24 Sep 2026 09:26:41 GMT\r\nx-77-nzt: k7iXHHQUw/VxQOcivmFWK7KYtLaGaavn6IZG7VnyGD/UxlveTaMWIcsj66/HF5IKfaVwXm4\r\nx-77-nzt-ray: e2f75420a13f146273a0c16aed56d226\r\nage: 832312\r\nx-77-cache: HIT\r\nx-77-age: 832273\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6767,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"2eba624c042df6b9ab614a422c182dc2","sha1":"c66297b197c51aa94b92a9066905bfa42e2e4c8e","sha256":"42d5bb3c366ad7621e46bc942f3009ee1ea1452c905fbbdf4f1d5c3f3220d09f","sha512":"3ab1e42fcdcbe0766b7f5eb07cb796550733ad5fc7dd65ef0657fe4fdb3c73fa94ed5ad19ee8111146f92dffbe72c2c9efb42c5eaa247f449db0050510d21682","ssdeep":"384:FNtFT88tMPdBgaw5O+mvRan7/AKsDoKzwA3Q+crsbUzgfTtQfQIeI+:FNtFX+dBgaw5O+aanrkoKkA3Q+cwbUwx","tlshash":"da72f9741210743f712fac492a6df497723ad298e697c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-09-24T09:31:55.036956Z","last_seen":"2026-10-04T09:57:00.771466Z","times_seen":197,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-04T00:39:25.637Z","timestamp":1791074365637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=724964229eb8505398ce8efaee27ac93; path=/; domain=globalfundsnexora.ltd; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5329\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Oct 2026 00:39:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"CameFrom","value":"deleted","quoted":false,"expires":"1970-01-01T00:00:01Z","raw_expires":"Thu, 01-Jan-1970 00:00:01 GMT","max_age":-1,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure"},{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93","quoted":false,"path":"/","domain":"globalfundsnexora.ltd","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=724964229eb8505398ce8efaee27ac93; path=/; domain=globalfundsnexora.ltd; HttpOnly; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":22804,"size_decoded":5884,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (430)","md5":"838cc3b69f2c1bfa68218cd76be8b76c","sha1":"6ed99c57018836b2b7c35a42e2330ce9d47bf67b","sha256":"46b86780b0489d8afa68d04653e8f08279e6880163ae9fc3d2ce567de47cd7ed","sha512":"8f569a7f5c753e020a6f4cd89cca97af2c19aa4f1689a637de0c240ca4398d5545dc17a4dbf1ff6b2f713364eaf4cfc42929c46a8e187b15e65989d87193640f","ssdeep":"384:qDm8HrJ/6XQLx66Vt3VcOY2O64O9/OBrO64UjJfkyOXa/3TmpNbPwXww+hpJ5uG:qDm8HrJSXQLx9aPcp","tlshash":"5fa24e2064ee69b7003221c2b5b92b0a2adfed73ea37458577bf46c95fd2d05ed1b012","first_seen":"2026-10-04T00:35:58.892107Z","last_seen":"2026-10-04T00:40:17.150256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8976,"timings":{"blocked":-1,"dns":3,"connect":66,"send":0,"wait":861,"receive":0,"ssl":8045},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/payment2.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.134Z","timestamp":1791074375134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/payment2.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1191\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1191,"size_decoded":1456,"mime_type":"image/png","magic":"PNG image data, 33 x 35, 8-bit/color RGBA, non-interlaced","md5":"549f5786556f918d9875cba9292e22eb","sha1":"ed9667b5ebf31e2ef0ba234ce6fda24759d1ba7b","sha256":"5130ca8b80d9bff0749cc6e628e3912d672f32df7f9e71446ecaaad5f99afd03","sha512":"fe2d84c71927c6ea400c98d992dcce3251007e174eeea83d19483bf952efab0f9b4f4fb280fd1e1cef3c2b3dc681d38b4eeb9c167c37b58bb254105a4ad199c7","ssdeep":"","tlshash":"4f21e793972f3fc19d832743678db161e462cc8721420e8d292b7f246ea8674aa40a1a","first_seen":"2026-06-08T23:33:03.771627Z","last_seen":"2026-10-04T00:40:17.15878Z","times_seen":5,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/feature2.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.146Z","timestamp":1791074375146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/feature2.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9263\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9263,"size_decoded":9528,"mime_type":"image/png","magic":"PNG image data, 136 x 140, 8-bit/color RGBA, non-interlaced","md5":"245e357c3a596602c423eb69806b21fb","sha1":"4f390b3c79e06bdf5907619e0153897c337517da","sha256":"f79abc90a9d6a8aea36eff17e52f40b6af413cfffb8da9e3610992b3066d5aa6","sha512":"62068d61b6680f2b13431efaa559aeb91f21b4efdd1bf78d060ba442033397271509d4a7279932c209668ccc129786ae15d4ff010ac797bca9fc89713d350594","ssdeep":"192:2fc6ZSuFCH2czGe9aDeip6AIUhplo/1oac+PhhlOsG9:2oH2IGCvuplO1oac+Fi","tlshash":"b712bf7e099f595b4a20a74b5da9f1f832940df71303b7c275124736d89c1caa9fd740","first_seen":"2026-06-08T23:33:03.750862Z","last_seen":"2026-10-04T00:40:17.162492Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/fee.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.150Z","timestamp":1791074375150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/fee.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 470\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":470,"size_decoded":734,"mime_type":"image/png","magic":"PNG image data, 24 x 25, 8-bit/color RGBA, non-interlaced","md5":"b9f1dd0c666f5eab2b719bde4a925f2b","sha1":"90bc17d53667d24fc927671ce9ecadf67ebeaa89","sha256":"adee5d7093a87f5a498c7326dbef97fa4e3893a47c36309a27fb23bd71f08819","sha512":"ce1300520339cee934f7cade14a22238a84acfe6cb419758b4471b0e001b22c3a389007885a5fe893a0393c95565b1dbc18428f03cb23bc81f05f053486685ff","ssdeep":"","tlshash":"38f0d4cf97f41b64ce155b924d011263dd1bd3010a7192e9521fe0354d16711c00111f","first_seen":"2026-10-04T00:35:58.895949Z","last_seen":"2026-10-04T00:40:17.164838Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/security2.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.153Z","timestamp":1791074375153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/security2.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5398\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5398,"size_decoded":5663,"mime_type":"image/png","magic":"PNG image data, 192 x 77, 8-bit/color RGBA, non-interlaced","md5":"1674c1503e6dd76a91c937d868484251","sha1":"4b99681e7b67f192fbd57d2a23e4013f7587bb15","sha256":"0ec53e589433158700f1f35d6689fed069c5b344ca1d46a106e8beda46f0de32","sha512":"25972b27789b1a65ce1cb07deb7a6a89cebf73ec507021579a8e0abbf5fa46f3c59b66fbd91e9b5928c1f4fbcb6ac910e08068b50039f58006e6b8d194234da1","ssdeep":"96:0LI36yadOtU9WJTel7t3iatb7m/mgGmxaiTof+Pu0CpXkLTZ60NOGZGsFH9yp3Gs:00qyadR9I07Xm0m48of+W0Ce56GOUFHO","tlshash":"2db1afb917ce1ef66d61c48267d048066efcbe5dec27421d8e04db129727beea034252","first_seen":"2026-06-08T23:33:03.776469Z","last_seen":"2026-10-04T00:40:17.168894Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/payment8.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.161Z","timestamp":1791074375161,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/payment8.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 619\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":619,"size_decoded":883,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2c81e213662e707aee9eabf39d6b618c","sha1":"4739cc118be909745791613518c70d45ba1950c4","sha256":"c289fc99c7f3d1b8b709abf9b94571ca286e3bb005f785a65501a624b28fbb61","sha512":"0dfa0e95c009ade2234d9cf0e110440af95fe8f56f2b440e633f6f872f5a9dda16db01331a60ad5020f7c9bc5e83e5c692f85af79cc66750673d2bccb6e19aa4","ssdeep":"","tlshash":"50f068b1e3be5889419d4372d9418561b4930b5b1a2419596a57c1311f35e4468d5347","first_seen":"2026-06-08T23:33:03.7745Z","last_seen":"2026-10-04T00:40:17.170493Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.916Z","timestamp":1791074375916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Oct 2026 04:27:20 GMT\r\nexpires: Sat, 02 Oct 2027 04:27:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 159135\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":8812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-10-04T09:28:46.746778Z","times_seen":312673,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/open-acc.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.131Z","timestamp":1791074375131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/open-acc.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 398\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":398,"size_decoded":662,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b1b4a5665fe20bbbb65c291eb99c4abd","sha1":"58e499e9417f7d5b5a3de7eca5a09218e0da9712","sha256":"fc68cc27e41433c0bb73816b7fa4173c7c9b60d2f3885054663c249c75b772de","sha512":"3f8e9f9acd125a57b9ce15c6a89585ec409f7c59f62cf6339204d7dc79256942ce9e00210eaa0c537181f850b2bb91a01f32d8e47949a1dbc118b07dac3b77f5","ssdeep":"","tlshash":"7ee0f18f5264a8748d16302b61c2443085714d48a2e8826d34c7d459181050c99bbba2","first_seen":"2026-06-08T23:33:03.78074Z","last_seen":"2026-10-04T00:40:17.172712Z","times_seen":5,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/payment3.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.136Z","timestamp":1791074375136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/payment3.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1594\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1594,"size_decoded":1859,"mime_type":"image/png","magic":"PNG image data, 33 x 34, 8-bit/color RGBA, non-interlaced","md5":"701dc3f9e8e3c57aa5c8f46506574d07","sha1":"5b4e5c033c6848e9e3938e1e4971e9417de7056b","sha256":"28f585ca2ecbe9f9ad89214eb667a5ca42a61be0c6b5d0cfafab8e18aca929c6","sha512":"97bed42f064cdaf6edbefca927c2b40c665d52854d033790551946cd59c07b306847bf5d0b4fc4d76d4377c910f2cf8840335771c11859fcf0c916188befdd94","ssdeep":"","tlshash":"cb31c8e7c8a9fd26c18200280f925221f47b696cc6bad75f5d0c43cb5658f940fc2268","first_seen":"2026-06-08T23:33:03.803502Z","last_seen":"2026-10-04T00:40:17.173536Z","times_seen":5,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/company.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.140Z","timestamp":1791074375140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/company.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 462\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":462,"size_decoded":726,"mime_type":"image/png","magic":"PNG image data, 24 x 21, 8-bit/color RGBA, non-interlaced","md5":"cedf0068f2b34bb756738120ceb76794","sha1":"c70ae33f27a5a9d442546abeb314265c6c7cc025","sha256":"d3b0ed95c5d66e4959665a2a3cce8a61877ce3529d13b8c0efb455fc74f47307","sha512":"a868af17ad461b3b4fb62ca72f4166dcf280d74d8c2a67dde1ff6cf3cedf5322a630e819b2981405d89265b75e2d3084d6298fa9792130b04712eb697390cc6d","ssdeep":"","tlshash":"e9f0d4d1b4974c25a894177d0c5c73b4581747b601256bba4417b1012fb5f55c194507","first_seen":"2026-06-08T23:33:03.807112Z","last_seen":"2026-10-04T00:40:17.176727Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/period.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.151Z","timestamp":1791074375151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/period.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 590\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":590,"size_decoded":854,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"32537cef8eca6b93e6c444fcb09e1607","sha1":"b2f83ff9437affad12106e538dcfa584fe6910f3","sha256":"50a7d94c80fa65a8a1e3a4ee818cb8a78899dca5feb0bdafe7b17ca8d1e1cb75","sha512":"ff68382d780c4cd4e6600ac407583d39f31b0430d847a7eb9da6c9224cd64feb2ea9c6082dc9fdf0d134fdcdfe9416c4b7833af4193735a3618228553f3c2919","ssdeep":"","tlshash":"eef047d2376cd89f9e2410b5162a8d3dc1113ba0416600fcd05fdfb49b18d1412cd205","first_seen":"2026-06-08T23:33:03.812036Z","last_seen":"2026-10-04T00:40:17.188936Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/bg1.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.874Z","timestamp":1791074375874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/bg1.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/styles/custom.css\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 93958\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93958,"size_decoded":94224,"mime_type":"image/png","magic":"PNG image data, 1920 x 1026, 8-bit/color RGBA, non-interlaced","md5":"1d08f2de9c804ea36cd1eda7aca30414","sha1":"abe350b4c262e1c6c574b0c00ce129e0252df270","sha256":"8769640b6a1efd9ed2c0e77efa5859c6da97109a0233171e5ab6a374ed8ddb49","sha512":"18cd5beefd1d922986d5991678c98a28118cdfd62c5ff54dc85cd7a69594754be351a8aecd147dc1a32461b4a67d2397966e82e5fa73ba0b05ac7c3fb54b262f","ssdeep":"1536:16SWZSb0nSwsikc/8KJwa6Bffy3YC40qRb8LxFHulcsGsJ4:7WZSz5inEd1O40LGyng4","tlshash":"e893f19d8e238cfffc18847e95be064437d716be0106af9f4778aa5a6e97322c4450b0","first_seen":"2026-06-08T23:33:03.804493Z","last_seen":"2026-10-04T00:40:17.192399Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1094,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"3.126.170.117","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:42.842Z","timestamp":1791074382842,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: viFZFxkfZtBhM0PYRyx/8w==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 04 Oct 2026 00:39:42 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Az0ssLooaiE2S7XJqju7RVaVEIE=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-04T09:32:38.525077Z","times_seen":18823076,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":95,"connect":114,"send":0,"wait":22,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.112Z","timestamp":1791074375112,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:19 GMT","end":"Fri, 11 Dec 2026 20:00:18 GMT"},"fingerprint":{"sha1":"76:8A:85:00:14:DF:5E:B0:05:02:DB:C3:01:B8:E4:04:DE:80:29:4F","sha256":"C0:C4:49:95:A7:12:E9:78:CF:5D:DE:65:3D:C0:D4:81:64:D4:96:1C:EA:25:ED:73:45:40:06:1A:C5:E8:0F:48"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-BUCKET=CKkC; Domain=.google.com; Expires=Fri, 02-Apr-2027 00:39:35 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-BUCKET","value":"CKkC","quoted":false,"path":"/","domain":".google.com","expires":"2027-04-02T00:39:35Z","raw_expires":"Fri, 02-Apr-2027 00:39:35 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-BUCKET=CKkC; Domain=.google.com; Expires=Fri, 02-Apr-2027 00:39:35 GMT; Path=/; Secure; HttpOnly; SameSite=lax"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2990,"size_decoded":1715,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1825)","md5":"eee9667a1528ca82a47e04c11469715f","sha1":"c1fa7b4c3f0dfe8624b04ea55e726987eedffc83","sha256":"baf71e6e718afd9965e743c402a7ec24853a4951ab9638bee46d2dcb24eba662","sha512":"bb4daf68cfde30d7adf3792ba52c4a962bfd6a152070022a18f15ea60b41722bfa05a7b542a16148353f76f007bce090e7c5e7fa28e35e4b8d5cbf90397fe619","ssdeep":"","tlshash":"c351f19a88b6d0dac4436c2acfef527922444037ec21dce5bedcd902bfb050ab60d9d4","first_seen":"2026-10-04T00:25:00.362888Z","last_seen":"2026-10-04T00:40:17.194162Z","times_seen":4,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":54,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:38.618Z","timestamp":1791074378618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=RACAAQ/d=0/rs=AN8SPfp6Z30hjHzpYmdG-mQhxDjwbTSt6g/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Oct 2026 08:23:32 GMT\r\nexpires: Sat, 02 Oct 2027 08:23:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 144966\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":2516,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-10-04T09:29:11.682865Z","times_seen":93802,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:42.758Z","timestamp":1791074382758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalfundsnexora.ltd/\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 00:39:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 29bdde8cf3b7ff891a9df4c11873e6c312746345\r\nx-77-nzt: k5KZUebVHLszqPgGBI8KlW0EXhPwa+5YBFDVx9FMkLqgGIGiofJSLLYdgOJFQaL7GPGNvJ4\r\nx-77-nzt-ray: fdb54123a4a35f7d73a0c16a6987ef30\r\nage: 157\r\nx-77-cache: HIT\r\nx-77-age: 130\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-10-04T09:57:00.810742Z","times_seen":1867,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":33,"connect":8,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:48.614Z","timestamp":1791074388614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://globalfundsnexora.ltd/\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://globalfundsnexora.ltd\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sun, 04 Oct 2026 00:39:48 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":529,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-04T09:32:38.525077Z","times_seen":18823076,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/animate.css","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:34.864Z","timestamp":1791074374864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/animate.css HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:35 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3941\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73016,"size_decoded":4252,"mime_type":"text/css","magic":"ASCII text","md5":"d1665e66efe81331b1de94104e64a64f","sha1":"a72fa625d2607497ff5ae53e72ee9cba541df650","sha256":"9099e50cf0c5b47dd04327da63bdcd6557f5b73e3ee22a8591fde10f9a660a16","sha512":"c9587b0ab8789dec1d06969eaaa669a4e316370992ed4704b20ea613b4c771157b12c18f6513204137bd0e4069f37d5451163d6597c7469120ff5a5559c51201","ssdeep":"384:f4rOmOo/x/SOmOw/l//FkFsmXmknz/S/cySy+/Z/V+/9Z4jHGJlMN3t4b:ArOmOo/x/SOmOw/l/Unz/S/cySy+/Z/+","tlshash":"31635d6d2991114452678a1983df9e78263cd1b3182aacef73ce5c8bcf86fac63c5507","first_seen":"2023-04-11T07:45:52Z","last_seen":"2026-10-04T00:40:17.202207Z","times_seen":146,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/jquery.js","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:34.868Z","timestamp":1791074374868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/jquery.js HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 33078\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94789,"size_decoded":33318,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32132)","md5":"321bd6efc995004e12a2a86ff271d154","sha1":"e2110216f65d19bd2eda842d4f3b21e09b9406a8","sha256":"c9f5ad152eb5e541cc43382e3f67185f6c464c13494213c161810879ef82dc39","sha512":"89b8143d02b76ec94654b443e79a263a9fb3dff55f52a19f8efadc55adb33af471ae8bba9519cc31d8191c9b3526c6e0e2efbbd2adece150c08f57d43886fff3","ssdeep":"1536:fYcvR3VhH37Ha7EmakRhIHAZkCDy08otU6myJXXxMZyYk0AjrzCqlKDh9YhnaTdu:fY8MaW2b+UELKTqnAdi2PQl","tlshash":"079309ddb1c5b02287bb70a950af540bf236195e280c4450f268d8f9fc74a4ea27bf6d","first_seen":"2026-06-08T23:33:03.759429Z","last_seen":"2026-10-04T00:40:17.205508Z","times_seen":5,"resource_available":true,"data":null}},"time_used":819,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/payment1.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.133Z","timestamp":1791074375133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/payment1.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1401\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1401,"size_decoded":1666,"mime_type":"image/png","magic":"PNG image data, 33 x 35, 8-bit/color RGBA, non-interlaced","md5":"5904c5c4975b4df0f3c38c879e69f9df","sha1":"6b8e8887202b15aadf6816926c3022a88e80819c","sha256":"a68e4cee1d7965845d0ab4be63cedb9761225ab5c226a5d3dc3f83d444a217f0","sha512":"8909a806af42d8b16cb95bb992a7bc50764d327cf64f18d9718b2828e9458829f8942472d96b5356b6dbe32e738e930ed96c9626ccfd8a4801a1318c32510331","ssdeep":"","tlshash":"09210bd35eee726d452776366a005232e35f82bb401662cdc09a827cf7346a50ab2add","first_seen":"2026-06-08T23:33:03.792789Z","last_seen":"2026-10-04T00:40:17.23942Z","times_seen":5,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/payment_proof.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.162Z","timestamp":1791074375162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/payment_proof.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2231\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2231,"size_decoded":2496,"mime_type":"image/png","magic":"PNG image data, 49 x 126, 8-bit/color RGBA, non-interlaced","md5":"72b92f2ac3dac8ab2cad76ad6af004cd","sha1":"23fa346da585c3fae4c75b6fdf0c0c0a9c8c3af1","sha256":"9b6f77a61dae5284c9dc62e34fb484aec9de6aec845acdb2b997fbc9fd60b1c6","sha512":"b70ce3ed8a11136cac80fd6f28395cb3af2475d75cabfba054ae243551c3df3ddf87090fa8f0fbd4fbe9bf76db31dcdd1174d23a27313ca5fc989ec6b23d719f","ssdeep":"","tlshash":"58412cf3f9de0366ca764494f70445052a11496c435ccc135e39ec26a697647e7d84bd","first_seen":"2026-06-08T23:33:03.770155Z","last_seen":"2026-10-04T00:40:17.241335Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/calendar.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.143Z","timestamp":1791074375143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/calendar.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 564\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":564,"size_decoded":828,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"e7e65c2b2496ef29cd395c6225c33e1b","sha1":"b9c595058b2354af7fb9833a3d562ad34efb13b3","sha256":"55f40efa4f97a1cedc6960e6a49e948c93f00caa93c59fc2a55e5ca7e02d854e","sha512":"bdfc4cb211f8f05633df75ad667452d2cea2b94421ad0d1d16a610a3779a333dd7a7042e943dc908a4030dc01c001404e3126f02debc6514ffbc0bb8620ce56b","ssdeep":"","tlshash":"4cf09675a3f09f125f3a06e1021f4d04d0125593ea9c824f12a1f0258d6cf12f1e13d7","first_seen":"2026-10-04T00:35:58.888752Z","last_seen":"2026-10-04T00:40:17.242415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemultifull?fsyms=BTC,ETH,DASH,LTC,XRP,XMR,BCH,XLM,DOGE\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.867Z","timestamp":1791074375867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 01:14:41 GMT","end":"Wed, 18 Nov 2026 02:14:37 GMT"},"fingerprint":{"sha1":"B9:AF:DE:4C:74:4C:4D:7C:9D:1C:C5:5F:A2:D7:5E:D2:22:11:41:C9","sha256":"FA:89:5F:37:B0:D9:87:3E:03:E6:D4:DD:CD:EB:B4:B5:55:50:5E:D5:9C:31:3F:75:C2:37:96:6A:D7:6B:96:12"}}},"request":{"raw":"GET /data/pricemultifull?fsyms=BTC,ETH,DASH,LTC,XRP,XMR,BCH,XLM,DOGE\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\ncontent-type: application/json\r\ncontent-length: 273\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: __cf_bm=wLWF1e0qvF5p33O5PRpRpGFobAvfg7fG_EMtn5zXDf8-1791074375.8878043-1.0.1.1-prMsPE9AUlhE4Re8pXcs2txk31eCu5kg4sn1Hno2HU7bR9gA9SBMHRZEbMGV1CBzcCEOWbnyhK6kMYafCDDy.wAoVW5kQLWYtag.rCznyTdU_qbeT6We_lSvNPnIFvs5; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptocompare.com; Expires=Sun, 04 Oct 2026 01:09:35 GMT\r\nserver: cloudflare\r\ncf-ray: a450216149845690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"wLWF1e0qvF5p33O5PRpRpGFobAvfg7fG_EMtn5zXDf8-1791074375.8878043-1.0.1.1-prMsPE9AUlhE4Re8pXcs2txk31eCu5kg4sn1Hno2HU7bR9gA9SBMHRZEbMGV1CBzcCEOWbnyhK6kMYafCDDy.wAoVW5kQLWYtag.rCznyTdU_qbeT6We_lSvNPnIFvs5","quoted":false,"path":"/","domain":"cryptocompare.com","expires":"2026-10-04T01:09:35Z","raw_expires":"Sun, 04 Oct 2026 01:09:35 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=wLWF1e0qvF5p33O5PRpRpGFobAvfg7fG_EMtn5zXDf8-1791074375.8878043-1.0.1.1-prMsPE9AUlhE4Re8pXcs2txk31eCu5kg4sn1Hno2HU7bR9gA9SBMHRZEbMGV1CBzcCEOWbnyhK6kMYafCDDy.wAoVW5kQLWYtag.rCznyTdU_qbeT6We_lSvNPnIFvs5; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptocompare.com; Expires=Sun, 04 Oct 2026 01:09:35 GMT"}],"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":273,"size_decoded":973,"mime_type":"application/json","magic":"JSON text data","md5":"817fe0f750fa91ac954b06a6e179f676","sha1":"651023a67e8786f8c7a63d323d81512687d851f1","sha256":"e54a34359ebeb4245031b742ee300e3fdd72ccf608d481d57caca1fc16147f17","sha512":"b6f4a24f4e9fd1ad99775fcfddc5311c09b8a77a3fc53798f1918b49fe87efcf1063aca6f4c9b63bb0d60d87d11bb5d0ff6223049f30b58d8013b642f33b6109","ssdeep":"","tlshash":"87d012f75585191b2b3743567068a8ace8d3888d99416447957d4364a28cd39128f21a","first_seen":"2026-06-09T22:35:40.080024Z","last_seen":"2026-10-04T00:40:17.245499Z","times_seen":135,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":3,"connect":3,"send":0,"wait":7,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/middle-bg.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.883Z","timestamp":1791074375883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/middle-bg.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/styles/custom.css\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26724\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26724,"size_decoded":26990,"mime_type":"image/png","magic":"PNG image data, 1600 x 1200, 8-bit/color RGBA, non-interlaced","md5":"0ac86aaac875b44b0d5f186209d3aac6","sha1":"397f80d533f8004c2fec09b806bcec2ce6ef14d1","sha256":"4ad7f649e810bdcdc59f00e1d7610b9c6587ce46df8f39a4da519f6285e19a84","sha512":"e62e22fa10a93da1b73b8cddaf3d8958b1ba9fde7002cdb4867cde49b515466b05e7efa28bf09fbe9a0de6aadea193cc80477ce4939c6e53f82f1abdcb014855","ssdeep":"768:L35fuijPaNPx/owJLtjQVW0t/urf9SsV48II7FdT:ZbaDw0B0Vx0rVSsJIuT","tlshash":"a7c2aedb8c111cc1cbca63b168de0f717f7a1279c9632b3a47b2e9e1dc859986f46460","first_seen":"2026-06-08T23:33:03.756956Z","last_seen":"2026-10-04T00:40:17.256961Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1247,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/css/translateelement.css","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.846Z","timestamp":1791074375846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /translate_static/css/translateelement.css HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ndate: Sun, 04 Oct 2026 00:39:35 GMT\r\nserver: sffe\r\ncontent-length: 1602\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-04T09:32:38.525077Z","times_seen":18823076,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=RACAAQ/d=0/rs=AN8SPfp6Z30hjHzpYmdG-mQhxDjwbTSt6g/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.853Z","timestamp":1791074375853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=RACAAQ/d=0/rs=AN8SPfp6Z30hjHzpYmdG-mQhxDjwbTSt6g/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 30 Sep 2026 18:58:03 GMT\r\nexpires: Thu, 30 Sep 2027 18:58:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 279692\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":4819,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-10-04T09:29:22.254386Z","times_seen":39669,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":16,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/bg2.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.876Z","timestamp":1791074375876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/bg2.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/styles/custom.css\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 129405\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":129405,"size_decoded":129672,"mime_type":"image/png","magic":"PNG image data, 1920 x 1026, 8-bit/color RGBA, non-interlaced","md5":"8a1f89819e7f9c53d0fed32cd162f909","sha1":"3c4a154974fa9c3a8063b7f234e5b2831b41ef2c","sha256":"6277c6058a5a2230b2c1cfef354ef8aed80cb72ddbbfcf03b5c152624899eb1f","sha512":"c7a2ee42670966b2347b33a3d1e3e308fbd131276af266371b312237cded939444ac1bd0d9a9e241d7d1c36cdf13573a8ae3add978f52543e64651ec5991fb8a","ssdeep":"3072:M+1yYOuANJjcMtQDb28rs2jnIjAsq96Wr:M+w7NF/tEq8rXjBL","tlshash":"7bc3f28bca67ce5cfd4f003618da5f153b506d100d890b7e1ab6ea0cef69b791b291c8","first_seen":"2026-06-08T23:33:03.767243Z","last_seen":"2026-10-04T00:40:17.291715Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1254,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/feature1.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.145Z","timestamp":1791074375145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/feature1.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18544\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18544,"size_decoded":18810,"mime_type":"image/png","magic":"PNG image data, 130 x 140, 8-bit/color RGBA, non-interlaced","md5":"03019e83a763382510807a272d5892d4","sha1":"2db4b3de7775da23805f1954792c63b3196cd627","sha256":"cc3c690e9f9fd1a551929a0ae2e2c183af74f7d8a5841c4be9418179977bd058","sha512":"ea239b645eb228e66f6abf196ef84b0a747189ca1bc2a965d631a63bdb6aa26730305979bf07d8b83641047d0831ba38687d4baf3c872d909ba3d41dc0880e16","ssdeep":"384:kzrc2DV+D8OfgsXQlICnd+V2nSKDKBg+ZbLi9IQZA/dXqz91luVm5gXf1+d5saOf:x2p+IOY/RnYVusg0bLi9LYdXwck5gv1J","tlshash":"4282d1ed82d27e494bb48222bccc2615463733651d22db7b98dd33d3404ef749dd654a","first_seen":"2026-06-08T23:33:03.7376Z","last_seen":"2026-10-04T00:40:17.295567Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/feature3.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.147Z","timestamp":1791074375147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/feature3.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8303\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8303,"size_decoded":8568,"mime_type":"image/png","magic":"PNG image data, 127 x 140, 8-bit/color RGBA, non-interlaced","md5":"44ee49f30976875d004aaaaedd751b1e","sha1":"6bc5d46fdd2741c0e04e622924579667134e173d","sha256":"98b7b1fe97e77f7387185fb392ef4030406d0f8c3da05042f9d8e541e6e67fbe","sha512":"088e2fa975d96fa72b3d7030763405119d84dd1d46b2a5d5b6c210f2a63d84d3ba1f1b975cfc8c7f8a1a5188f53f61e6150266973354906143efa856fef64aa3","ssdeep":"192:e791CIthMxJaR65NaV4GyUQ+J+XFrzMc7m/hrMyE:+HCIth+JaRvV5yUQhXRzMc7eFE","tlshash":"5902af4e0670d781d3a3cda1a39ec3d5c9b21cf0568f6bb8db8e85c694e2fb01976046","first_seen":"2026-06-08T23:33:03.809289Z","last_seen":"2026-10-04T00:40:17.305764Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/feature4.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.148Z","timestamp":1791074375148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/feature4.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15117\r\ndate: Sun, 04 Oct 2026 00:39:37 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15117,"size_decoded":15383,"mime_type":"image/png","magic":"PNG image data, 131 x 140, 8-bit/color RGBA, non-interlaced","md5":"0e70858beedaeb687490e242fe60fc02","sha1":"2615c80588be074dd7568f4a430542f01bec246a","sha256":"a391bdb3e2309d87bbef6ed30e84fe686dd9f1d7fc90e57e0cafc8b912bcc42b","sha512":"606f0430898d98d9f26ac012b4427e924a92d60da6121f2a68aca9236c8fbf754684ce67bb543733715accec351416169e47501e1695372ccb93dad961ea4ae1","ssdeep":"384:UWdjdPtGb6F9dAuOmB2GN+kwxWVUSCD5mDXChtaPYW:U+RPC6HdAXsXMDSCNO/v","tlshash":"9a62c057c468ff65ef5b0f5703b3a8125660e41bae4385eb970e18c0351e61b0ac6deb","first_seen":"2026-06-08T23:33:03.773494Z","last_seen":"2026-10-04T00:40:17.311144Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/f8e4be0ee2ea3e5d62f36b7a6dccedce2f325f48.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"63.180.77.129","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:39.150Z","timestamp":1791074379150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/f8e4be0ee2ea3e5d62f36b7a6dccedce2f325f48.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 00:39:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c7-B/6NfaaDpZne/g/uc5qfSnm44ZA\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1223,"size_decoded":879,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1623b3b9e850c9c1491c70aef8d248c2","sha1":"07fe8d7da683a599defe0fee739a9f4a79b8e190","sha256":"b5b4d35c58c664f860fdab342e28e4f7337c31f56e8da3582e65972af84deb9e","sha512":"bcfb7323cde3f50f57c38880ba4f962f1f35f106a93074f2f3da73256fe2b54698c6065b11f1bc93d6f74811f6d2543fc6f5aa7afea2e5df1ff45b4f25fcc6d2","ssdeep":"","tlshash":"5321766d4a6822fd5245c7d6c5047a036bacdcb371003e7eea0d0a0e70db2e6223646b","first_seen":"2026-06-06T06:44:39.646667Z","last_seen":"2026-10-04T06:26:59.116731Z","times_seen":2845,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":4,"connect":25,"send":0,"wait":28,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalfundsnexora.ltd/styles/images/security1.png","fqdn":"globalfundsnexora.ltd","domain":"globalfundsnexora.ltd","tld":"ltd"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.152Z","timestamp":1791074375152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.globalfundsnexora.ltd","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:47:08 GMT","end":"Thu, 31 Dec 2026 06:47:07 GMT"},"fingerprint":{"sha1":"84:07:BE:3F:10:CB:30:DA:5B:25:4B:7E:AF:AD:DA:0E:FF:A8:B0:05","sha256":"14:4E:92:A9:90:6C:65:D8:81:53:B2:48:24:2F:7B:5F:4A:53:C0:3A:95:ED:F7:BD:74:CE:8B:D0:B0:5F:0C:BE"}}},"request":{"raw":"GET /styles/images/security1.png HTTP/1.1\r\nHost: globalfundsnexora.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://globalfundsnexora.ltd/\r\nCookie: PHPSESSID=724964229eb8505398ce8efaee27ac93\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"724964229eb8505398ce8efaee27ac93"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Oct 2026 00:39:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Oct 2026 11:52:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4190\r\ndate: Sun, 04 Oct 2026 00:39:36 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4190,"size_decoded":4455,"mime_type":"image/png","magic":"PNG image data, 202 x 77, 8-bit/color RGBA, non-interlaced","md5":"1ccec5a645ea2b756636c517789453b8","sha1":"06728b9dec2577c218adc7e04b6acf36f62f9fbd","sha256":"38fd14bd98bc59f89848d57d15fcfae4eb5c84de76ca0b7bed88a24d1c756a8f","sha512":"65bdac95837fce11a20897f2531a4602326721871998f0da74b46a224b8014a01be9ca1bbbeccddaec8cbfbb7a44b95468caaa49dc00c0a2a59495cfef2fa31f","ssdeep":"96:VfaFokBDVB70HTXwNtbnoIbgq76gVTLZHAmMoNEr5PAsS5YP:VfaFhbB0HTXEtDoIMqXJLxNm5PAFq","tlshash":"39815d3728da8eb16d33ca776b25478aed1f8f61cd73cc6264e68524101bee09245e37","first_seen":"2026-06-08T23:33:03.800188Z","last_seen":"2026-10-04T00:40:17.322914Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-04","alert":"Phishing Block","trigger":"globalfundsnexora.ltd","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-04","alert":"Sinkholed","trigger":"globalfundsnexora.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:35.919Z","timestamp":1791074375919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:37 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 463618\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-10-04T09:29:09.708372Z","times_seen":317617,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":20,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CoaqmBWZ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalfundsnexora.ltd/","date":"2026-10-04T00:39:42.647Z","timestamp":1791074382647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CoaqmBWZ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://globalfundsnexora.ltd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 04 Oct 2026 00:39:42 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6aa903df-8d76\"\r\nexpires: Wed, 15 Sep 2027 08:39:36 GMT\r\nlast-modified: Tue, 15 Sep 2026 08:37:51 GMT\r\nx-77-nzt: k4L2y4+SEFI7NvlSmP/rAlmAIh3lDFzUa7IJnXo9OfGO84QOgD98LrOo9lwFruDVaN/0Pzw\r\nx-77-nzt-ray: e2f75420a13f146273a0c16a95d4f726\r\nage: 1612806\r\nx-77-cache: HIT\r\nx-77-age: 1612774\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36214,"size_decoded":8228,"mime_type":"text/css","magic":"ASCII text, with very long lines (36201)","md5":"d67581c9b3003d85736b4a54c38a6f38","sha1":"0ada53753b0d87201b854a692e2bafd682b99811","sha256":"f849d090665d31e2c158996956b91a47ca60d0beb614a0ee17b25d3172636a86","sha512":"f7d871280eac56430f11bdeea780dd2d1681bea7347a9ef71f8977455147ac51a86ab59e2d5b9379677debd38ea37f726fd75207f250eeb57cd3013e70710c3f","ssdeep":"384:F8fY2l09kg7Tc6/WYtGLadKzSVX8Kj6+iZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM09kgTcCWYtG4XicrNSN56DwQ43","tlshash":"06f2966daad9093dac23c179e3f8e58c911af5e5df3226daf74239008ac17ff0986514","first_seen":"2026-09-15T08:49:00.636328Z","last_seen":"2026-10-04T09:57:00.772113Z","times_seen":398,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}