{"report_id":"b261a858-204a-4e24-835e-8fe537089ab0","version":0,"status":"done","tags":[],"date":"2026-06-26T21:59:46Z","url":{"schema":"https","addr":"nexusworksledger.com","fqdn":"nexusworksledger.com","domain":"nexusworksledger.com","tld":"com"},"ip":{"addr":"104.21.82.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexusworksledger.com/","fqdn":"nexusworksledger.com","domain":"nexusworksledger.com","tld":"com"},"title":"Ledger Support","dom":{"size":27478,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25155)","md5":"ad6c09946ca613d0fa1944b6e3a92ce4","sha1":"a249ee803550500edb8e1ecdc12bb71719d61e0f","sha256":"9597e4eb9d5d2176f2d1571a36ee727fbb8a37f6632fcf6e82858767c3fe6a50","sha512":"be4f66a660c87a39c54b00f287f713d6cd79f0db88b16ce377a541f0f296f09ee2a2909e4123c1e00abb1167dbc92f5459250eb9cdf418d5f470f758d882f46d","ssdeep":"384:KGTyGa1V5rOWrhSjNlRThMcbOvoT1Omg802p05kLl9VISfgdW+BunXhJ11LYy0HD:RTO1hrgjNlrD/8v","tlshash":"d4c297279304150da32f969cf901bb9e731741439309c7b876a9433be68d2715a6b7cd","dom_hash":"domhashcc7209f978e254599fc1e80c80cf8668","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nexusworksledger.com","fqdn":"nexusworksledger.com","domain":"nexusworksledger.com","tld":"com"},"ip":{"addr":"104.21.82.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-31T21:59:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"nexusworksledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexusworksledger.com","ip":{"addr":"172.67.164.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":479543,"sent_data":1927,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexusworksledger.com/assets/index-N3DlJEyK.js","fqdn":"nexusworksledger.com","domain":"nexusworksledger.com","tld":"com"},"ip":{"addr":"172.67.164.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1ee43fa4ad18d64e9d9fb57b0917dc1","sha1":"3e3e0c4b7ca3f08f2e404b2826d4df200c92fe71","sha256":"b61c2c74e7feee254a7a67aca94e571c5b2ccbb508d03b289e57e666a3e2e730","sha512":"26040421280844f6a148ea6376bc2206ff4eb0ac88d5f6f3c43bde091308c9b1e07053cf94114b738c83dae38f9a99783481c15d38899cbe1c3a601c16fc5331","ssdeep":"6144:ijbcbzWsl/EDVBi83S1GeEjF/b7GviW9twQ0KyOz:oLY/ODx3sGeEjsvioiW","tlshash":"dc847de8319a7226aba342e1506f5107b23d1922b40d4860f228ddbe7775485b1bfffd","size":387446,"data":"","first_seen":"2026-06-25T13:32:16.834998Z","last_seen":"2026-06-26T22:00:35.900335Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexusworksledger.com/","fqdn":"nexusworksledger.com","domain":"nexusworksledger.com","tld":"com"},"ip":{"addr":"172.67.164.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-26T21:59:21.459Z","timestamp":1782511161459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusworksledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 20:21:37 GMT","end":"Thu, 24 Sep 2026 21:18:56 GMT"},"fingerprint":{"sha1":"3C:D4:B9:47:14:82:4B:B0:61:D8:3C:4E:7A:46:BD:24:0C:04:D5:91","sha256":"B1:6F:1E:D1:28:1C:20:84:39:3F:33:0F:EB:34:8E:3B:FA:EE:35:76:7C:97:D8:0C:B4:F4:B5:C4:0C:F7:02:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexusworksledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 21:59:22 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 24 Jun 2026 14:26:46 GMT\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b8JLxIf%2BiolZ6M%2FeDTVSfMovTW8sLAan837NSBdGSDRhyMXZKL2TCmfBUf6DPE0cExlwxFCo%2B3w0PFANiZDaMlXpQxkL29DXKs3hAvX8IIsakMyHewbCFz9dFN8bbEf%2FD9VH6z2COw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a11f7a87583a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1331,"size_decoded":1175,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7e420fe180e6686e4691eb47c76ffe1e","sha1":"9dd763adc57a0c4ece5de1a74e482e5215d13250","sha256":"f3a7b26a2c026a767fb692fd99f3f14660ed63b7e903b15b2d16ef4c2179e03b","sha512":"286391b200f36c077d0aeed58245d530ec39ecda38f386887aa2795305a55f66f64ff9e18c4c03cc31d95cce88a8e499c90b1213f485ff1f0e3d7ff4cd5bed6e","ssdeep":"","tlshash":"4021106795b188140314829c9cd4f806cd2686bb870d6c06b1dd40ef4fccbc2caefaa5","first_seen":"2026-06-25T13:32:16.833169Z","last_seen":"2026-06-26T22:00:35.898781Z","times_seen":4,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":12,"connect":17,"send":0,"wait":629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"nexusworksledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusworksledger.com/","date":"2026-06-26T21:59:22.538Z","timestamp":1782511162538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusworksledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 26 Jun 2026 21:59:22 GMT\r\ndate: Fri, 26 Jun 2026 21:59:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-27T13:41:31.819555Z","times_seen":31976,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":66,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusworksledger.com/assets/index-N3DlJEyK.js","fqdn":"nexusworksledger.com","domain":"nexusworksledger.com","tld":"com"},"ip":{"addr":"172.67.164.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusworksledger.com/","date":"2026-06-26T21:59:22.541Z","timestamp":1782511162541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusworksledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 20:21:37 GMT","end":"Thu, 24 Sep 2026 21:18:56 GMT"},"fingerprint":{"sha1":"3C:D4:B9:47:14:82:4B:B0:61:D8:3C:4E:7A:46:BD:24:0C:04:D5:91","sha256":"B1:6F:1E:D1:28:1C:20:84:39:3F:33:0F:EB:34:8E:3B:FA:EE:35:76:7C:97:D8:0C:B4:F4:B5:C4:0C:F7:02:F7"}}},"request":{"raw":"GET /assets/index-N3DlJEyK.js HTTP/1.1\r\nHost: nexusworksledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusworksledger.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 21:59:23 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UYUZX3C1GXzGuHG3azoMm%2BQsIRiALT1SR%2BsYxZZeoSa5AhB6cUj6skO0t9ACrwsi8xQq2LwmJijbd2Y6HNmDwFa5TPXkzy%2FWWTVu%2BUrMiRWwsudFQ67pjeNt9A71LigrslAr0wIodA%3D%3D\"}]}\r\nlast-modified: Wed, 24 Jun 2026 14:26:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a3be926-5e976\"\r\ncf-ray: a11f7a8de92a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":387446,"size_decoded":128113,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36546)","md5":"a1ee43fa4ad18d64e9d9fb57b0917dc1","sha1":"3e3e0c4b7ca3f08f2e404b2826d4df200c92fe71","sha256":"b61c2c74e7feee254a7a67aca94e571c5b2ccbb508d03b289e57e666a3e2e730","sha512":"26040421280844f6a148ea6376bc2206ff4eb0ac88d5f6f3c43bde091308c9b1e07053cf94114b738c83dae38f9a99783481c15d38899cbe1c3a601c16fc5331","ssdeep":"6144:ijbcbzWsl/EDVBi83S1GeEjF/b7GviW9twQ0KyOz:oLY/ODx3sGeEjsvioiW","tlshash":"dc847de8319a7226aba342e1506f5107b23d1922b40d4860f228ddbe7775485b1bfffd","first_seen":"2026-06-25T13:32:16.834998Z","last_seen":"2026-06-26T22:00:35.900335Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":807,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"nexusworksledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusworksledger.com/assets/index-C9t5tDcc.css","fqdn":"nexusworksledger.com","domain":"nexusworksledger.com","tld":"com"},"ip":{"addr":"172.67.164.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusworksledger.com/","date":"2026-06-26T21:59:22.542Z","timestamp":1782511162542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusworksledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 20:21:37 GMT","end":"Thu, 24 Sep 2026 21:18:56 GMT"},"fingerprint":{"sha1":"3C:D4:B9:47:14:82:4B:B0:61:D8:3C:4E:7A:46:BD:24:0C:04:D5:91","sha256":"B1:6F:1E:D1:28:1C:20:84:39:3F:33:0F:EB:34:8E:3B:FA:EE:35:76:7C:97:D8:0C:B4:F4:B5:C4:0C:F7:02:F7"}}},"request":{"raw":"GET /assets/index-C9t5tDcc.css HTTP/1.1\r\nHost: nexusworksledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusworksledger.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 21:59:23 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kU6OBxKBjApf%2B9mP2U51eit1XXmNlXb7EMU5yS8aG%2F%2BB%2BaTpyzGjCejbfD8FBPgT%2BhI%2BqSz4KEnc5VBPqv1ozgGgD9gzIUU%2BmpGbv8fyQuKj38spdSXM3fGgtuQDWpeEZzkBavpdXg%3D%3D\"}]}\r\nlast-modified: Wed, 24 Jun 2026 14:26:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a3be926-152e3\"\r\ncf-ray: a11f7a8de92b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86755,"size_decoded":16330,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"17e7fe20834d71d4d2f66ff26a499663","sha1":"042aa487f3be5c7a59e160df6ccc35f8c0426bb8","sha256":"2612a9f49a64878f7886f14833bd5f56f6ed2bbf0f542e58e1b88adf064825a0","sha512":"27572086da2b348f311ca57eb66dcbd588c32407dd07c0e3fd5d9ca223c835f0659b3c9e22b61a66a4155724a9c154bb054ca2a27df7d756f595afe18e1492c1","ssdeep":"1536:/85CMQVh+kyaoyjXxuSJa5kddxLeGua1SsMno+WxFAFbuH7PjnnUZfKxkK988R9C:E5CMQVh+ktoyFuSJaWdPLeGdMno+WxFG","tlshash":"8083c750b22de47f7c7364e9938cb89c4119b0c0dd3945e9fe46a22247c7bf5adab218","first_seen":"2026-06-25T13:32:16.836057Z","last_seen":"2026-06-26T22:00:35.901123Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"nexusworksledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusworksledger.com/favicon.ico","fqdn":"nexusworksledger.com","domain":"nexusworksledger.com","tld":"com"},"ip":{"addr":"172.67.164.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusworksledger.com/","date":"2026-06-26T21:59:24.109Z","timestamp":1782511164109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusworksledger.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 20:21:37 GMT","end":"Thu, 24 Sep 2026 21:18:56 GMT"},"fingerprint":{"sha1":"3C:D4:B9:47:14:82:4B:B0:61:D8:3C:4E:7A:46:BD:24:0C:04:D5:91","sha256":"B1:6F:1E:D1:28:1C:20:84:39:3F:33:0F:EB:34:8E:3B:FA:EE:35:76:7C:97:D8:0C:B4:F4:B5:C4:0C:F7:02:F7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nexusworksledger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusworksledger.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 21:59:24 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 24 Jun 2026 14:26:46 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B4atazhWvWy6JLrcLRPmIIhPunHwwNaHFTuNYZv5fo7yculKVcSnMZMKp4VSPUB%2FtCjH5FyHloR%2FHjvYO7gCuE59i4k%2BTj0zAU0Y4EVNMf88naODIDrPqfCZtJzFetQgGmQlXOfBNA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a11f7a97bad876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1331,"size_decoded":1205,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"7e420fe180e6686e4691eb47c76ffe1e","sha1":"9dd763adc57a0c4ece5de1a74e482e5215d13250","sha256":"f3a7b26a2c026a767fb692fd99f3f14660ed63b7e903b15b2d16ef4c2179e03b","sha512":"286391b200f36c077d0aeed58245d530ec39ecda38f386887aa2795305a55f66f64ff9e18c4c03cc31d95cce88a8e499c90b1213f485ff1f0e3d7ff4cd5bed6e","ssdeep":"","tlshash":"4021106795b188140314829c9cd4f806cd2686bb870d6c06b1dd40ef4fccbc2caefaa5","first_seen":"2026-06-25T13:32:16.833169Z","last_seen":"2026-06-26T22:00:35.898781Z","times_seen":4,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"nexusworksledger.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}