{"report_id":"bca29f5d-7a1c-4648-9bb0-6b73bf3c83e5","version":0,"status":"done","tags":[],"date":"2026-06-17T16:35:08Z","url":{"schema":"http","addr":"nexusscorp.com","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexusscorp.com/#/","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"title":"nexusscorp.com/#/","dom":{"size":2347235,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54573), with CRLF, LF line terminators","md5":"f7cd3be523739f67b7cd0bc9abaf4167","sha1":"3a8803dc46b133f78b3440d708375b39601aa16f","sha256":"3370dcc4d10e99a10e21136137703e308a983190b83eee41047a301544e77770","sha512":"51413ca11a231d8cdc03ef9d81110394b174fa381d0a14cab6d4a27573292104f0c9aae0fa70007d9bfea58ac4d0b6af0b4e1060fb1128aba9a725f2108f296f","ssdeep":"24576:MZdwG1ZAIkKDJ3bys5XrHeg05Tce4H9q23JbJowMEh7+GwU9ZLQYRdVk0/4qWZHO:gDJ1","tlshash":"42b56e10f2582e6b513786d1d880b97e11b4b393e56fe6abb16013f9cf836823b5174e","dom_hash":"domhash5902a727c5237c54c4e1841795eff3b5","first_seen":"2026-06-17T16:35:13.840353Z","last_seen":"2026-06-17T16:35:13.842179Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexusscorp.com","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T16:35:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-06-12T05:35:14.643371Z","alert_count":0,"request_count":1,"received_data":576,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.ultrapexpro.cc","ip":{"addr":"168.76.120.141","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"South Africa","country_code":"ZA"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-06-15T11:34:53.330511Z","last_seen":"2026-06-15T11:34:53.330511Z","alert_count":0,"request_count":2,"received_data":2416,"sent_data":1136,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nexusscorp.com","ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-13","domain_rank":0,"first_seen":"2026-06-15T11:35:15.527386Z","last_seen":"2026-06-15T11:35:15.527386Z","alert_count":60,"request_count":30,"received_data":4772907,"sent_data":15231,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexusscorp.com/static/common/js/touch-emulator.js","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"178ba7db6232252a555ba6ff953756a8","sha1":"31129606e2c7e395a73184f30e81e835a424cdf5","sha256":"2968f310031c7a0c1d271836caa44aedaa28794289d14c577f0b17033e8c036d","sha512":"dea2f867ed3e1774320ea9494c9fd6fa24a7c7eeba27e50099530d3eabe196b6a34f70cfb7d0ac87aa5c70dcb5172d149de92da8af78725b6090952588041dbd","ssdeep":"96:L+vx+c5tJzNjX/wGiZ27oA2qMrttS7KDWom4RhvYahnT/TCKkTIT1/CoShwqhzcs:yvx+chzxItcKs+LmKk8TqhzwoEPq","tlshash":"1a32314f098a226204bb7329fb9e904af67e85a311012056fcbc5f653f72a758694ecd","size":11668,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-07-28T18:14:36.017766Z","times_seen":736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d6b954dc2d01b7f947ffbdbc08419c4","sha1":"91b4d1da374271f3f7a26ace5bb5d9a18cc7833d","sha256":"33452930b33391ee5b905f55ea3d83da98c22f96e001002468f1230369567e4e","sha512":"0edd93b88ed4f3b4e519ecaf80b84a9226198637f31e617f182614a579969c77e65863f98bda78349defd5054b0de9daff0d03b9299fdf432a72ca1b28191074","ssdeep":"","tlshash":"bb6000c3c03303000c0033ff00c300f00000c0000000f3003cc3000330000c003c00cc","size":16,"data":"","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-08-02T21:17:18.961649Z","times_seen":994,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/js/chunk-vendors.69677fcc.js","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a035909d5799d965fe756689afb14d93","sha1":"454f7049d4da5dc5e26ef6e064208fd69b98926e","sha256":"69b190ad2c04b560a27e9d6a6a13e9c890f97339c4a6f676a91b02eb88e0d8c3","sha512":"c9ee1d75c1017137c80b69785098b4b537e86e3edf78b335ec0d02ae375be42703e1d6c3bf47c5cee9864f74e66fa77bcb2145ac8e98e6b5cd140193bf12c9ac","ssdeep":"6144:TjFsoCGGDJz2M5BzcK3hLnR3+Ky577s1F+eV7mLsqSY3CkU:TjFK9zdU3J7A17V23C7","tlshash":"70f4f79cb285b0b607e760f5003f220ba23b6968b40a94d5f275e5d4ad78d8e6137f7c","size":745021,"data":"","first_seen":"2026-06-15T11:34:58.9513Z","last_seen":"2026-06-17T16:35:13.877096Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/js/index.62dffc46.js","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4faa4a19da0d2b904cbe030396aa74","sha1":"c6db7e4ce255e34424023a077df3f6ac22377c99","sha256":"9b7027a10dad08374c24006a168ba72044c2477bd28e9fe2ca621be7faabd448","sha512":"37ac65cfaac867ca7f8508ae3a8b62642f375feaac709c1919b94dbe1d9b3daeadf4b456c4c7a79e985d8b6d250ccb8c66d646769c4acad81f8c51cbd8466d72","ssdeep":"24576:Ft+eZdwG1ZAIkKDJ3bys5XrHeg05T85Lf0:FtTLs","tlshash":"6f157ca7f4c5596812d71601a08f335812b99c216945f8cdb3ca6b14cbd6fcea232b7f","size":914260,"data":"","first_seen":"2026-06-15T11:34:58.969905Z","last_seen":"2026-06-17T16:35:13.865824Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/js/pages-welcome.196cd750.js","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e1075b98c15724ba24f54b3c7ed6878","sha1":"db93708a258dfaff981f1f1ddc185742ed4bed6d","sha256":"c5957cee0494b3fd0ef9847a88c24756949965c748321efc09315b01477a6d7a","sha512":"7b845f5eee480829289aa061ca5145a80644b03e21b9e10c9839997df51c1fc0454f685309f801c2fd60a7f2bc10e3abbcc3b29d4077dc543ac2f801a6907551","ssdeep":"24576:re4H9q23JbJowMEh7+GwU9ZLQYjngk0/vlxZK+S/Np7+1zfNgUhek6ypiR2tmgzB:uTJ/","tlshash":"4aa55e10fa582e6b503785d2d882b92f21b07753f15ef2afb16112f9de876423b11b4e","size":2199480,"data":"","first_seen":"2026-06-15T11:34:58.987879Z","last_seen":"2026-06-17T16:35:13.889086Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[system]Loading translations:map[actor:server1.conn0.watcher14.process7//obj24 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[en:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true] fra:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj30 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true] jp:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj28 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true] kor:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj29 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true] spa:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj31 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true] th:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true] zh:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj26 class:Object extensible:true frozen:false isError:false ownPropertyLength:8 sealed:false type:object] writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://nexusscorp.com/static/js/chunk-vendors.69677fcc.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"nexusscorp.com/static/wz662/nav/3-0.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:42.872Z","timestamp":1781714082872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/wz662/nav/3-0.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e77-ec8\"\r\nexpires: Fri, 17 Jul 2026 16:34:42 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7kiemOeju3E66IyW37luTQaxKykAS5cy%2FDMdnx8zORIFT987rBZqo95QB8Z9TfzRbhyQAxlNjLAfCQrFr5jxYAiODjO2Ge%2FfW9y7WaTg1v4IxnqXZJiEaFBsBUTbE7%2FFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d37699fd17120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3784,"size_decoded":4593,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit/color RGBA, non-interlaced","md5":"26482458c8c8bed04a8d4843725a8f74","sha1":"296b8a5f585d5809b38609849f8b1c9264814f8f","sha256":"2ef4b52b8d804afd1b40f97b24ed672f41dab3696fbf0f4bc7bb9a21a9c8c0ff","sha512":"28082c669ee533658e2f016b3c5b30202a48add429c616bfb776436b50124f405ee11ccb8788b5c250108973f1b2ae0926d9acd5e21341faf6608bb9db051c95","ssdeep":"","tlshash":"6f717bbaaab014425831f02a603c86ae41e346644a78b10adf2c3efd1d0a6709ef53e4","first_seen":"2026-06-15T11:34:58.942114Z","last_seen":"2026-06-17T16:35:13.870162Z","times_seen":4,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/wz662/Logo1.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.412Z","timestamp":1781714084412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/wz662/Logo1.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e77-2ab6\"\r\nexpires: Fri, 17 Jul 2026 16:34:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zILRO7Z%2F5sUhfHTTf%2FJI4f7zMH8RP5dbzvk085vORwrmeSKxds3ub3MCEkiTTZihTb4aD5qnxcxpLsA05HELLQcxm7eVYyPQhZAOrBGn3QuTBEQQ5LuNsMruXU1qelXmWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d376a39f12120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10934,"size_decoded":11742,"mime_type":"image/png","magic":"PNG image data, 272 x 100, 8-bit/color RGBA, non-interlaced","md5":"bfa32c691619f50e19385bb78c9269aa","sha1":"1ba7d9f751a20630ece08d7705ee7586e0ab08ab","sha256":"f86e95eaf0b00b09bffca75cc6af886a6828aabeb0c9bfbe0dd35e231f2a4670","sha512":"92344b7a1c272c7ea8a50f5b1cd82ee3cc5b5fc7aa4cf655dec1d43c6577a4446237a7b9bf972233549e8458426c844695d966ebdc8d00cfc92eb0973dcdb504","ssdeep":"192:gv0fYf86xwmRIhzloIUoHbrS6VBnzu00d1pKlGpDfs0hooBODXUYX:Y0wfYMIdtUonS6Vpzu0a15o0HBcUg","tlshash":"b232c0c1c0e2d85990224f7787d4a961ce781469a20d08e5b7ab37b31b0568bb73eb4f","first_seen":"2026-06-15T11:34:58.983147Z","last_seen":"2026-06-17T16:35:13.863243Z","times_seen":4,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":892,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/sites/files/eyrktu1401/files/ICN-Flat-Light-Shield%20Lock-nobkg%403x.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.488Z","timestamp":1781714084488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /sites/files/eyrktu1401/files/ICN-Flat-Light-Shield%20Lock-nobkg%403x.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RseGgt0jvDvH7T%2BO8KhdRAj8OQCAHyyDpB5Ghn4alRTewlPgJ1XNkFvtBf5K%2Fe2bDG3Nr4INs3F7w7JluO2Rsurq6Yh3cJgn7F8f2H4m%2B4p7x5b8P4asEAatRRWt0uMojQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\ncf-ray: a0d376a41f2f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":705,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T03:23:37.930785Z","times_seen":547292,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/DIN-Regular.ttf","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:42.620Z","timestamp":1781714082620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/DIN-Regular.ttf HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:43 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 08 Jun 2026 18:48:19 GMT\r\netag: \"6a270e73-6064\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRBLOrgmhi85s0QGQ56nh12BAUlidd2l51yoltZ57ylqTk6CVHz%2BKpsvtcYgt%2FQje0KlOl0h1FQgqGDjMJsfxHdrpHfr7QErt1kA%2FQzsxOkCk9PlZpfZdKoKa%2FYp9%2FP3cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 24676\r\ncf-ray: a0d376986c6c120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24676,"size_decoded":25434,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"1e0b91dcb4ed262d0c603006919a1fd8","sha1":"aa0cecebc344f5a3bbd614ab97a42ff8f8637d46","sha256":"4749fb5068ba31c2cba31bf6c7340977fc21cf0e9339bdf155dd57457cfc9e0d","sha512":"dc5635a9a7a8f0b3b454de6c1cd56bd22d16310a18b874f153a38bdecaf41dad5eea2405f3e092d9040f9278d37cc5163dba32f3478f91d7a6a348f4ee708bd8","ssdeep":"384:9iJk3F9sakdL5E5P/y5QJ0FNpmuJqJgkJhBZ5JeJMz1vHJb90KILamCKwL/plOLz:9JmdlAn2/pm6cBpJX2sdX4","tlshash":"9db27c0957424b0fc7277e308e2642a2d725fcb427fa9bdb9d44d8f7606d2e34c68a45","first_seen":"2023-04-17T17:59:29Z","last_seen":"2026-08-03T11:16:08.604299Z","times_seen":546,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":726,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/wz662/nav/1-1.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:42.868Z","timestamp":1781714082868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/wz662/nav/1-1.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e77-724\"\r\nexpires: Fri, 17 Jul 2026 16:34:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5G0O9fsutPbEMU50G7DErJHsTg50Ble8DMQotNgCt4exd35ynkwQgwMSfswaGGPtnf23Rzf8%2Fe4VW69KucfxYQgl5Yw5LkUV9oReRQCg0EN0K64xffMbJBKXf9RPBDRxeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d37699ed13120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1828,"size_decoded":2628,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"63e1b994b505681fe96e6a4659f5092b","sha1":"cf03967b1e5f978718b107b738cb750f4c928e58","sha256":"e02c18b0ba7b59b7df2200bec427b1373e24862e471dd51048c5b9c0f1d91feb","sha512":"d2ec2c2ce4b076650e603a0bf6338b414084e177cc221f7fd7ce9803225cca3fdac0311f54c2e93c23c66e23f0120085078387035d284aaaba0daf09095b9bef","ssdeep":"","tlshash":"ea314b07b654cdf9043e5a4bee2902bdfc6ef851245003f68c22ce648a09007e1fb903","first_seen":"2026-06-15T11:34:58.944304Z","last_seen":"2026-06-17T16:35:13.854369Z","times_seen":4,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/Invest_gradient_Marquee.avif","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.413Z","timestamp":1781714084413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/Invest_gradient_Marquee.avif HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: image/avif\r\npriority: u=5,i\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\netag: \"6a270e77-3dda\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IcfHBkYkaittHvLykO43sOabj%2BqkE0mH4CJd1SeiJ8umcH%2FOL33dQcGEMQj482pM%2B8raGI78jid9jBAHDMGZJqldEYRY5x558JWzIaPlxCToIvgQgqHCHjU12QxjEeo1zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 15834\r\ncf-ray: a0d376a39f13120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15834,"size_decoded":16571,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4d335849fb21bc534e85b8b2998ed4b5","sha1":"09ef49a3011dcef63376ef5a6f1ed73229c5d891","sha256":"5e4d92a776800bf6ca1ec6de05814df8eb3ca0c8e9bde6e1a991554b5993bb12","sha512":"a62ab851e58fcf5a131da0a6a0742fbe25bef2eb4214c61c94a3c9c369ebd201ee304e221ae46575a1940662ae4e36eef9f4540b22b227b27b9a84dbb32cfde0","ssdeep":"384:rm6Zv26xY0iFDJMF1kiL2TILeZbBKGyi0YK5wrpRdmvX:qGGdv+3LI/VJMzEj4","tlshash":"c462c08404715d31dc4aa17a98a8cb3411bbcbf512726e02f857be3b6c09ba59137785","first_seen":"2026-06-15T11:34:58.984618Z","last_seen":"2026-06-17T16:35:13.876791Z","times_seen":4,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/Forbes-1068x60087_transparent.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.415Z","timestamp":1781714084415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/Forbes-1068x60087_transparent.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e76-1a290\"\r\nexpires: Fri, 17 Jul 2026 16:34:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q029YMn4C6ax1YYs1suOsWcTOvw8uXU1%2BdUwN3nzVRhAz8CIoH7k8aIW%2FpOyctILVJ0%2Fl1QNsgm1HJjvT3%2BKkROZSjZmSh8%2BY07oKYbc7weqSaRQg3bUTkKuhmd7LyVdgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d376a39f14120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107152,"size_decoded":101580,"mime_type":"image/png","magic":"PNG image data, 1065 x 597, 8-bit/color RGBA, non-interlaced","md5":"d339714eff60555685837e2b654383a9","sha1":"9bf364e6cfb4bf1b24a1922e0c44dc4818922821","sha256":"9999b20ede39c478565bcf6facce069327b65a7fefb85174e38f0672e4b76e84","sha512":"ed2c706f9ef9d305bc2d8d8a90a2b89d860fb4a1a41062dec1243d50c1b750047f2e32cf37b9931a00a42a1f2fc46157fae1ac088b470befc869c1611f753fa9","ssdeep":"3072:f68xxBm8a+FqrDIYtE8PW5xgWEPc9J2QpREq35Jch3xXmnSv3uuA9nRcHmQbjdE0:LxxBm8a+Fqf+8O5xgWEPc9J20J5J0MSJ","tlshash":"afa302128782c99e847f023bdeac23450121be72bd9357fdba5a907d775b148da0f09e","first_seen":"2026-06-15T11:34:58.977747Z","last_seen":"2026-06-17T16:35:13.873111Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":889,"receive":435,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/sec-logo-2x.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.420Z","timestamp":1781714084420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/sec-logo-2x.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e77-f071\"\r\nexpires: Fri, 17 Jul 2026 16:34:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzYzgGVW0P5IedIl%2F64IE%2FU9u6RuvfSRCXIMTAvEgjHPDkHY%2FW0cVv91BLZKoctf6kz05Rou4G7qHeQw3ZCFacZLAKT0P3gA9w%2FzbONe%2Bst5JlrXDlwTUEzuyc3lv7aoDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d376a3af18120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61553,"size_decoded":62333,"mime_type":"image/png","magic":"PNG image data, 2496 x 632, 4-bit colormap, non-interlaced","md5":"24034a01b207d94890bfb772d08cbf59","sha1":"a3c619b4edb3dc6e7569121913d83c173bc755f3","sha256":"7446b217e067ff7b28afbe41b7d0d5817d798733e4b50d1296e4f16f2259c533","sha512":"d4ae7284a7df14468fd89c9fc467f04d0739c6f15ee4fe1b3bf2e33158e0f175a1d2432966f4473496a76f8a90ccc48fa0b130553969b65b5c138b1f57b2929e","ssdeep":"1536:jn4h365K4qQJfr8YXZdLVRWylTOlYkNEEDWDwI0eT1s:rEq5PqQJVhVR4NDD4VZs","tlshash":"c953022e59ce2b7c67b01832925307a7976a485e6453dd38e82f3818bfc117295fb48f","first_seen":"2025-11-05T13:24:48.406691Z","last_seen":"2026-06-17T16:35:13.878778Z","times_seen":132,"resource_available":false,"data":null}},"time_used":1122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":899,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.220.205.65","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.643Z","timestamp":1781714084643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Wed, 17 Jun 2026 17:04:45 GMT\r\ncache-control: max-age=1800\r\nset-cookie: __uni__uid=rBEQRWoyzKW8PSspA5yXAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":576,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-08T03:08:15.477708Z","times_seen":20167,"resource_available":false,"data":null}},"time_used":1260,"timings":{"blocked":-1,"dns":3,"connect":191,"send":0,"wait":443,"receive":0,"ssl":622},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T16:34:39.741Z","timestamp":1781714079741,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:40 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w9ybkTbQDcPC%2Bq%2FrjHb77EGO%2F1aLNMMEKqXKNsPqqJIMZC%2FVvQjZlX6PyW7WPWQxEoRFD7Vfe2dephyIKnUgzh7AF%2BpTsFlqJyNO4jrzNelXt3asueGMp9e%2F8U4q6jZK4A%3D%3D\"}]}\r\nlast-modified: Wed, 17 Jun 2026 14:24:16 GMT\r\npriority: u=0,i\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a0d37686b862120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804,"size_decoded":1150,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (566)","md5":"781e7aec7d4249bcbb3c72b56bbc4a1f","sha1":"d0e39066ab142ef38724eccc0eb87fdac10e2ad3","sha256":"03538779dd8a0ff9467f4841f679770d7c091a00fd537f4de79bc76d84bbc9b0","sha512":"99e850f243eb466b18bc998ae891d66f4067606dbf36c9e9fd95c483d37eb78f3962ae75f017fc00cf8c220ab6a66e482812bce96acd55e311e279be1b608697","ssdeep":"","tlshash":"b5011e878d24c54a0730d95914bab11cc08e85a508b0d821bcc41eec98d0b8c063e496","first_seen":"2026-06-17T16:35:13.85474Z","last_seen":"2026-06-17T16:35:13.874446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":740,"timings":{"blocked":-1,"dns":32,"connect":20,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/js/pages-welcome.196cd750.js","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:42.604Z","timestamp":1781714082604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/js/pages-welcome.196cd750.js HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 08 Jun 2026 18:48:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e75-218fb8\"\r\nexpires: Thu, 18 Jun 2026 04:34:43 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hY%2BknxPpCCgOYaWp8TF%2FhYgDKY8tVIu1aAWFhinhrnAtFQbQwV0GDXaD3QxobVqmZby8jJGIy9dkqdycWTeD2yCQFFXIdOn4eu5JydUTRE7JMGd8EDtS2OYhE7yuyaVvxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d376984c69120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2199480,"size_decoded":237725,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65489), with no line terminators","md5":"8bacf559ed0e7be4e9e92f5cef8ac97f","sha1":"a984f9b8eb715a29d2b4314979be5db90746c681","sha256":"f25a9f3d63f30241c142f7f12ca2ba7319f9589fbba6cd0df6badc5f8e0d6984","sha512":"31662fceafa40e1a7abade0539ae64d00585d720d847a5d182f7657fe7f8ea28c58c1156aa04aa96b5d7131c9196ab114279a2e4cf008c428911a3f5623f8a48","ssdeep":"24576:re4H9q23JbJowMEh7+GwU9ZLQYjngk0/vlxZK+S/Np7+1zfNgUhek6ypiR2tmgzN:uN","tlshash":"79254010f6892e6b417786e1c985796f61b073d3f01af6af711202f9cb867823b51a4f","first_seen":"2026-06-15T11:34:58.940798Z","last_seen":"2026-06-17T16:35:13.856311Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1549,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":892,"receive":657,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/Final-CFTC-Logo-Long.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.422Z","timestamp":1781714084422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/Final-CFTC-Logo-Long.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e76-1f5d\"\r\nexpires: Fri, 17 Jul 2026 16:34:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BS8ML%2BwjwhD0G29H8J1NLaQNMsGjmOoNcuEfxYYWHE6tGoOZwz3%2BYd%2Be41MSlhmhyyU7bViijsb8lPH8jiVRTvSVE1ZzUoQwCT5yKePWiLJhyo8KxO%2F9QifP4kz%2FYAXfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d376a3af1a120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8029,"size_decoded":8673,"mime_type":"image/png","magic":"PNG image data, 453 x 113, 8-bit/color RGBA, non-interlaced","md5":"d9ca3dfa39780bc8a6b15983d66851aa","sha1":"339435522662eac2e0bcbd9083bf46216d1ba6cb","sha256":"3473ae8649ec6a20fb87a6bd916134391ed648bb613d4c1a56b5d7d910554980","sha512":"0505d1288159d844327853ce02bb546c12042821d24ebd4586664a3745c75558f979cce8e9a20889282863dfa707b955352539d536b44dc5c912939e0a2731b4","ssdeep":"192:Wx/3NaoBy48tp36gZZZALGKxTLMbXz//VdFgOXFzNDRx:Wx/olL648H1Q3zFRV/x","tlshash":"77f1afc607a5cf9694186f3630cc5e208026f7d92bcc2eae5c5bc894c2cd547e6701a4","first_seen":"2024-08-20T09:18:04.687075Z","last_seen":"2026-06-17T16:35:13.866348Z","times_seen":7,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/sites/files/eyrktu1401/files/ICN-Flat-Light-ETF-nobkg%403x_1.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.485Z","timestamp":1781714084485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /sites/files/eyrktu1401/files/ICN-Flat-Light-ETF-nobkg%403x_1.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:44 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rgCJRGUmMjR3xgzRDbCL7Y%2FKu%2FRUEhjro4iPD4%2FNJBoFbgx%2BQSpo%2FTUeF7eaYzmATtuGehrvCtZLBuv4cX%2BIvhZv1JMTREyEhqVk%2B3KjHCevKqq7B1MNgRaG4%2FlRMLcbMw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\ncf-ray: a0d376a40f2d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":715,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T03:23:37.930785Z","times_seen":547292,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/wz662/nav/4-0.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:42.875Z","timestamp":1781714082875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/wz662/nav/4-0.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e77-961\"\r\nexpires: Fri, 17 Jul 2026 16:34:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jzC9lPSAWEsrl3acl3aI284YCnbhSCIiCZw0e941Y3F1LgRjY%2B947XRTGboBewnCYv7UaQA5qnaLbAy8EK%2BDgrjXnYM0%2Bbc12QtPcvqf458jX%2FHufJGPSXn7XgWeyPFg0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d37699fd18120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2401,"size_decoded":3212,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"e5dc6ba506014d90a98c052c6170badf","sha1":"40a0b1ed5f26d7e6df7585ac105d1666e9acac6b","sha256":"e7259badfe028f750bf774c58f0937d5002b028398df1e7ca8787ccf9d32abc1","sha512":"21be2c59ba5bed04b68539c31c17f3270720cc732e8e034c133a50ae17bc1b7e4fea9aad5504dd790174531add2b326a4ecfa5753839d22af3da0cc5491f2ee5","ssdeep":"","tlshash":"b0413b2341e182f0b1f9a4b568ae0fc6776f34694610fb91eb75b860be2a359220f560","first_seen":"2026-06-15T11:34:58.952387Z","last_seen":"2026-06-17T16:35:13.871164Z","times_seen":4,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":690,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/sipc_logo.svg","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.425Z","timestamp":1781714084425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/sipc_logo.svg HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e77-4718\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pwETehIiaXwBtytXMjWDM4ucqnXi2uLDxy8X1CGuLGD%2FDTfJ3bvrQ8fKBPK9GRy73XTt%2BvnT%2FAwZbGbk9bm0LGs8JsxdPryx3WFFuMtqkcAFvLqX7Sws9%2FawVH1rHjQKoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d376a3af1d120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18200,"size_decoded":7995,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6cadc775732a3778f6c580231e3a471d","sha1":"098d856a325449f0c0d0b29fe409f8fda1601d73","sha256":"b5045e09af04cfdd0fa6276abe0cbede8c7b43c26c935fbcb1b3874451048e5e","sha512":"945d2d95ecb973e2b7479ea96d977248d48488ee973b0d7c7f6615b0ae3f0e8247d80c4c2ededbc3c3ba93a5d655c785f1cf64f0577d8073189550414b8956f3","ssdeep":"384:GOsOm1Ra1iU4bK1MDkq58cydSY2KHXLpUTEMfoi1f+42IzZSA4b:GOsOaop4uIqcyQY289U51Xxub","tlshash":"348253a6d6a20574c7950b8cc1e01c056a5f5c693638e3a8e61edfb17f31ae7d0b8cb4","first_seen":"2023-09-27T13:24:15Z","last_seen":"2026-06-17T16:35:13.869468Z","times_seen":240,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/CharlesModern-Light.woff","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.529Z","timestamp":1781714084529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/CharlesModern-Light.woff HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: font/woff\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\netag: \"6a270e76-58e7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FDXfHtaIH2PPjQemKi9JMVMF7nQhDE6A9TBM5IzsCRn2OHe2QBareZgmkqug%2FlvEJobHBayltoV2MRjt5Qkmp3gxwI2EYoQzu6Gb%2BRxTowuYbZNBetCCEEqU1cS6kaePVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 22759\r\ncf-ray: a0d376a45f35120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22759,"size_decoded":23498,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22759, version 1.0","md5":"8ee469caa99cd0bda7b939de099c3761","sha1":"4f52e551c2ccacd012360bc0b2eeab2bba09299d","sha256":"5272a114b9742bd1c8ffca7fd3980832553913770dfd5a2a1c0e12361680cec0","sha512":"6b91219ebfedd9324a4658d24ac2edd7e11fc4867b21dca404ec3d93ebd46e5a206d7fdbf0a0000822f5805fb3d35c3c046e4e628bff1c5c55862ca681ce10e1","ssdeep":"384:obgXZHylWdz54odTof8ox9uZiDYnH35uFI6MKoz/C2P9gh8L39WDcikFqsScoqAz:IlWdz1k8oudHIoz/Cu9m8LtEABEp","tlshash":"54a2e114fe98a13af0117fb4bf73bec835e1248c995ad4bc42e8a508a16b193d3c355b","first_seen":"2023-04-10T08:36:59Z","last_seen":"2026-08-02T11:39:19.158251Z","times_seen":209,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/Schwab-Icon-Font.woff","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.532Z","timestamp":1781714084532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/Schwab-Icon-Font.woff HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:44 GMT\r\ncontent-type: font/woff\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\netag: \"6a270e77-b0b0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eb3xdESt1c4v0ooi8e1QV5zmAsleH5tDTvQn7vS3vUD0V13pLUjAiaz2xC50aWlT3UZc%2BC%2FJn2Wq7GAp%2FDdoxHHjUB8eq1%2BrWfP1gmhvdkYN2%2BF0p0wzZrs7ORE8yXWjiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 45232\r\ncf-ray: a0d376a45f38120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45232,"size_decoded":45982,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 45232, version 1.5","md5":"d8c7cf720747a5b07a16904476794087","sha1":"30c296352d54df292768ce74b9e3382e9b877511","sha256":"7195daf3d40633fb3a32e5160b227e303d6b6ee9ca9476a32a96474d83784c40","sha512":"853249d0fc6b5503867bf8fd02044734e53cb3174285ca8b520e573efb941c26bf252b2617a0bf31270e2f4245df47d630f090f724612fcbb845ae6bd9dcac74","ssdeep":"768:r8BVQ6L2u2mdMGirApAt6aSPhxqfv15sU/:r8BK6L2u2mOrApAt6XjqV","tlshash":"d7135d67dbe7de41c8126abc8d0b63150bff8d042122c79b06840d592d8a7f1aed53f9","first_seen":"2023-04-10T08:36:59Z","last_seen":"2026-07-24T18:54:48.207962Z","times_seen":180,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.ultrapexpro.cc/socket.io/?EIO=3\u0026transport=websocket","fqdn":"api.ultrapexpro.cc","domain":"ultrapexpro.cc","tld":"cc"},"ip":{"addr":"168.76.120.141","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:42.880Z","timestamp":1781714082880,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ultrapexpro.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 17:39:08 GMT","end":"Tue, 11 Aug 2026 17:39:07 GMT"},"fingerprint":{"sha1":"F6:34:65:5C:2A:60:CA:19:28:60:BB:F0:D4:32:BE:9A:AC:BE:6A:5C","sha256":"F8:3C:AA:D1:61:F3:F6:CF:31:A9:99:12:78:2E:F2:4C:1D:7E:BA:8F:D0:0D:37:52:A7:98:40:CA:76:24:15:EA"}}},"request":{"raw":"GET /socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: api.ultrapexpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nexusscorp.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dq3cn6lLO5jaddCE8DRX+Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 17 Jun 2026 16:34:44 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: fD0qOKsVbLGOfkncydCngHQxJPI=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":227,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T04:24:20.804972Z","times_seen":17772833,"resource_available":true,"data":null}},"time_used":1965,"timings":{"blocked":-1,"dns":654,"connect":871,"send":0,"wait":215,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/modules/custom/schwab_genesys/wd_js/sch_genesys.css","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.404Z","timestamp":1781714084404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /modules/custom/schwab_genesys/wd_js/sch_genesys.css HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZrafs5eg3SrEdAHFXrBE2aCE7V9ZeMVR4hFK9nQkDNVAXP5g3B4aPnG2q422G86is0QqT%2BOx9Z1RP06%2Blgh8eEfEU7r9qKbRNdZTf729fRXxo7MdtArgFrw2is02QKDMw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=2,i=?0\r\ncf-ray: a0d376a38f0f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":706,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T03:23:37.930785Z","times_seen":547292,"resource_available":true,"data":null}},"time_used":726,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":726,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/js/index.62dffc46.js","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:40.706Z","timestamp":1781714080706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/js/index.62dffc46.js HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 08 Jun 2026 18:48:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e73-df354\"\r\nexpires: Thu, 18 Jun 2026 04:34:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yns6RfsHW9YqPz%2BvO0F%2Fswt40heUsM%2BPDr1iKZ3N1X4O368Kg8V4QT1kM38nmbgl5F9ZKsdblBKRC9tqej%2BeKHv9z4%2BNUJUTqmF0ONn5CKCdh38SsSB9jdAI45lbXm0UZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d3768c6975120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":914260,"size_decoded":227242,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65100), with no line terminators","md5":"ed4faa4a19da0d2b904cbe030396aa74","sha1":"c6db7e4ce255e34424023a077df3f6ac22377c99","sha256":"9b7027a10dad08374c24006a168ba72044c2477bd28e9fe2ca621be7faabd448","sha512":"37ac65cfaac867ca7f8508ae3a8b62642f375feaac709c1919b94dbe1d9b3daeadf4b456c4c7a79e985d8b6d250ccb8c66d646769c4acad81f8c51cbd8466d72","ssdeep":"24576:Ft+eZdwG1ZAIkKDJ3bys5XrHeg05T85Lf0:FtTLs","tlshash":"6f157ca7f4c5596812d71601a08f335812b99c216945f8cdb3ca6b14cbd6fcea232b7f","first_seen":"2026-06-15T11:34:58.969905Z","last_seen":"2026-06-17T16:35:13.865824Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":898,"receive":652,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/common/js/touch-emulator.js","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:40.701Z","timestamp":1781714080701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/common/js/touch-emulator.js HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\nvary: Accept-Encoding\r\netag: \"6a270e76-2d94\"\r\nexpires: Thu, 18 Jun 2026 04:34:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ND8sqQZL7vkOIMjn7DtCHYGuJgJb5jxrPEGjNlfBf9bzIRXOaOdNvEYh0nBePW%2FW5b%2F6cU0HN%2FF7915stKNfSJUDvX%2BR5O%2B6gqr9FC272nJyBhuao6%2Bu4LJt5T06qQGhcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d3768c6971120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11668,"size_decoded":3857,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"178ba7db6232252a555ba6ff953756a8","sha1":"31129606e2c7e395a73184f30e81e835a424cdf5","sha256":"2968f310031c7a0c1d271836caa44aedaa28794289d14c577f0b17033e8c036d","sha512":"dea2f867ed3e1774320ea9494c9fd6fa24a7c7eeba27e50099530d3eabe196b6a34f70cfb7d0ac87aa5c70dcb5172d149de92da8af78725b6090952588041dbd","ssdeep":"96:L+vx+c5tJzNjX/wGiZ27oA2qMrttS7KDWom4RhvYahnT/TCKkTIT1/CoShwqhzcs:yvx+chzxItcKs+LmKk8TqhzwoEPq","tlshash":"1a32314f098a226204bb7329fb9e904af67e85a311012056fcbc5f653f72a758694ecd","first_seen":"2023-03-07T14:41:52Z","last_seen":"2026-07-28T18:14:36.017766Z","times_seen":736,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/wz662/nav/5-0.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:42.876Z","timestamp":1781714082876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/wz662/nav/5-0.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e77-624\"\r\nexpires: Fri, 17 Jul 2026 16:34:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2TobLnHKoAblu30zIlu10jICkteKmgTFb9I%2FQqEPh%2FSyh4BVWZICJ6%2BAG%2BPAunVIcxFOql6b%2Fc1P0VJE2yqWLBGxYhtLIJPq7bRiJJrKiMS4GJZ9RSNac7PhQFRnNpdrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d37699fd1c120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1572,"size_decoded":2385,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"5adc38b5a9a2b31c9023f5a136d0bd31","sha1":"05ba661276c0d4b44f5d86de45509f9a9b0a7bfd","sha256":"b966ce4100edeac07b19a801bd61f09724e8154e9294db7780f7b318987b010c","sha512":"bbbf2e2248e39174f06f51fc66235853d8f5398e74f42d35037f2cfab59f318151d6a0735d2705044b5aed3120f9486ec3d70e5d75edb207f7c35959ef85edbc","ssdeep":"","tlshash":"a631e8e32d348924d87b12c60c28e606c636361ee76f798960f84564928407945da482","first_seen":"2026-06-15T11:34:58.976574Z","last_seen":"2026-06-17T16:35:13.867519Z","times_seen":4,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/image/icon/favicon.ico","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:43.786Z","timestamp":1781714083786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/image/icon/favicon.ico HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:44 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTXqL2GNF%2BK1cYhFoXL6Oa%2Fn4dgMpCbL9wkIIzEt%2BralxLe53jM1jGzwWElo4TZR7CiYEjM0vIK14DVDNzVuUn3iMAYeKeQXmthoT8IWDTCtT%2FEH7mPVsqOODmcZRVBJxw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a270e76-5bc\"\r\ncf-ray: a0d3769fae83120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":2201,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64 with PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced, 24 bits/pixel","md5":"47074a7f6be35c50d633488952230b59","sha1":"45ab9182de01430346d07555a923e4d632c59e3f","sha256":"4358055c04a2e9edf75d00ec1c6815a2c99ba74dbaf0dbb9b2c5c3f716df1dbb","sha512":"2749e122f2f75aac7636a5d4fdde798342140e4a1f09b3d35e82810691a4fe8492dc5bd418c36486b458b89a340b93203f3608ec5310938f97d83d6f9f354948","ssdeep":"","tlshash":"9831e6a76b1648eac2382418c4325906ca8f7cdb4b5d24c23de63f208c6b7c0275df36","first_seen":"2023-05-13T12:43:41Z","last_seen":"2026-08-02T21:17:18.928692Z","times_seen":427,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/IBD-1068x600_transparent.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.417Z","timestamp":1781714084417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/IBD-1068x600_transparent.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e76-240aa\"\r\nexpires: Fri, 17 Jul 2026 16:34:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCUf0NRkNEcjRf6asGdsk2Wiblm0gIHvFqHaWidsu1Nz5uwnOrba2yDvP9lpR1QQpefCg%2FEDWD7MJXxrKZn6Dz3LzMNUC9XvaLDXwt6QFgxPmwbuWA96WYigtEEsHAFNtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d376a39f15120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147626,"size_decoded":144418,"mime_type":"image/png","magic":"PNG image data, 1067 x 599, 8-bit/color RGBA, non-interlaced","md5":"419c3075c24760b94ab988ef5bb21031","sha1":"97e3365da03f6e1ec88120db561afa7ab8fc6a9b","sha256":"226867a1ece97776cc2c08abcc26aeeb21d3c1d635e5b42f967a462dcdf09d30","sha512":"527fd567f9ec840444e26c47160d256e2ad9477f59c9d14ba05c704f99e43746547b8b30f3f2ddb0401c8eef92e3618997fda4a42f9e9699fe754a899c7a321d","ssdeep":"3072:7EEGlSHXuddL8U+hG6GZflXW8Yb20q+NRgeSQco+tbM:jGA3udZZ6SMVbBBtco+6","tlshash":"3ae3122e70b8e58dbf6f09a9c0518ff164fe4072d962dcbeee287643054bd0624529f9","first_seen":"2026-06-15T11:34:58.949641Z","last_seen":"2026-06-17T16:35:13.877813Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":903,"receive":447,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/2024%20J.D.%20Power%20Award_1068x600%20(2).png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.419Z","timestamp":1781714084419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/2024%20J.D.%20Power%20Award_1068x600%20(2).png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e76-3d107\"\r\nexpires: Fri, 17 Jul 2026 16:34:44 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MbIVwihzfFTV9jCDIPzXOSowBPBwz3N3Yk8WAN4mEDGrDlF9ML3xxInLgjsbyzz8Hqry%2FZ5p1QOqSpFga80tOdxbCKDPkgb8GoDTlFfBSzgaj2%2FCrL0wm%2B6%2BjckvKAMasw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d376a3af19120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250119,"size_decoded":247883,"mime_type":"image/png","magic":"PNG image data, 1066 x 597, 8-bit/color RGBA, non-interlaced","md5":"d54140d9331f2f98854ffce158242adb","sha1":"9b921f0f868f385eb444f18554185c0e1825c684","sha256":"31564a7660ee9eb0c888ff57329a3d71281c98bd6d77994b8b6a01933e21b89d","sha512":"df7c9234afcbcb591eadf6908e3ee2ec4d3b759fc74e81716ef13ae6037137b89140ee80484c65aadbe5c86650a7466ef224fdab202b7199869ccff892f2caf2","ssdeep":"6144:uZ0dSbDOjqGSIqR5n8BsJsZqkhUNrHJCxn0:uaUapSQsJs2u0","tlshash":"a73423696184d0a80875319fcbcc06f5efa1539f7c2589e42dafd2e92fc6072e4e7429","first_seen":"2026-06-15T11:34:58.971612Z","last_seen":"2026-06-17T16:35:13.871157Z","times_seen":4,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":690,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/Finra_85th_logo_0.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.424Z","timestamp":1781714084424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/Finra_85th_logo_0.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e76-337c\"\r\nexpires: Wed, 15 Jul 2026 11:34:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 190800\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bto5WQ6nt5mrvQQDnHvd0T6ynIfudyMiEm3MEFzeHzKm8STs5yM0AOCFHBREIq73TS1vDL9Cx6kpM55rbTkrA1h6KlPPZsgzd2Rzyev5mdgsU6EO%2Be4NMfgpsfpp%2BpEchw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d376a3af1c120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13180,"size_decoded":14002,"mime_type":"image/png","magic":"PNG image data, 243 x 152, 8-bit/color RGBA, non-interlaced","md5":"ae967e24522d13b7b18de35147e02575","sha1":"cdba8b02cf2358f9f1513d719dcf7a3f96bdc869","sha256":"65d5b70934b768100bed9852b9e7d5ba479372e1e687f66422baa46a63533641","sha512":"9c4f70be82047b00aa647b4c4befe976aa2978c1e5b99694f9c9ade0a705d039c944ed0159ac0b2e18ed719ff4cbe78b29e0a802421500b5ce5b01a75ef6e660","ssdeep":"384:0ySpE5sahnudO8PsWcZAvepxT8LwGK19IkL2Vr27:b55hnuFxuZs472Vq7","tlshash":"5842d094bf8590f87264f690e2428e7f9eed1bd5465108e92b671e4c838bfe13a305c7","first_seen":"2025-01-15T22:52:53.904366Z","last_seen":"2026-06-17T16:35:13.87308Z","times_seen":53,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/sites/files/eyrktu1401/files/ICN-Flat-Light-USD-nobkg%403x_0.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.487Z","timestamp":1781714084487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /sites/files/eyrktu1401/files/ICN-Flat-Light-USD-nobkg%403x_0.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jo5wdluCdI9w6924bK74sC%2FWH7iu41Gtkfl0WdP3O91%2FQ%2FNu4QV5UF4%2F4I9dl8avXzrYZrrmOzF3%2Bbv66zK9xVCPKbDaC7mbse1Q34DA%2Bivy94a9rAFFXsnwxw0F2n6Q6A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i\r\ncf-ray: a0d376a40f2e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":714,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-08T03:23:37.930785Z","times_seen":547292,"resource_available":true,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/CharlesModern-Bold.woff","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.531Z","timestamp":1781714084531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/CharlesModern-Bold.woff HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: font/woff\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\netag: \"6a270e76-57e3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyBpNacysdYlk4irwws%2FqAPkEG4oFd7Tn1HlpmeBJFnfm%2FeLzFCfSCdmRJWYHrRZN7kfhkXsyT6N3mc0EmBJjaz%2Bdcgkv%2FY1zPa1LxFrR%2BSuvVsBWZpxAuUQwjEdlUPcXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 22499\r\ncf-ray: a0d376a45f37120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22499,"size_decoded":23242,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22499, version 1.0","md5":"74be2cb641e86bd9bf23b7cf679a63c2","sha1":"e56f50fde3b65417f933e55676f06d1929d49ba2","sha256":"dbd7421d7e66438a05d215fe172d3c18ba02fc614a46fde231f3886e437aa75c","sha512":"b4f1c4eaea1e97a90f6dbfefcf264c5f4a65098e45e19f02d5834b1b065a4f8d4f4523ea805e97c580850b55972672093c2603db1ca9d3db4319d08e9b208b9b","ssdeep":"384:Q2hO3Bn9DdD54TuV/zglvC6Tc0xXcbl8Cb6xlcb3II7hKlM9d3hL4:VQ59DdDqupzQXckosW3IIYl+thL4","tlshash":"65a2e1112354efa7e0ddcd74a68db7c52ae03bad13d30529efc809865bb59c1a2ac44e","first_seen":"2023-04-10T08:36:59Z","last_seen":"2026-07-24T18:54:48.242727Z","times_seen":180,"resource_available":false,"data":null}},"time_used":905,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/index.css","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:40.703Z","timestamp":1781714080703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/index.css HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e76-17998\"\r\nexpires: Thu, 18 Jun 2026 04:34:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8uhAP3uvK%2FHZ7%2B0Rfvr88Nd0RgpNWS9MqO0NfZeWoh%2Fckn3fomIjcy2p0EDenW%2FMR8QwlqRuKHTkzwZ9M%2BUhZZgc%2FQNWUaMRbt3snjI2dqr1WQS2DHuwkZBvxeLvo4o1MQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d3768c6972120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96664,"size_decoded":27304,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b23ffbdf507ee417fc3c7b7b242737a7","sha1":"eba2371178176221506aff0dc474570e47562e55","sha256":"97fafefc6bb45ed52a6930fd2fa079e13da77929f11bc7b813d5f09c85ff0f36","sha512":"c5bcad9b474333689093a848601b2871dcd50e04fbd2592ebee0053bed1c540a95f371e84db5bd34f641345bff4cfdf3938a9266b3280243f95fa7cafd6e4519","ssdeep":"1536:qlIApuK7hmVmU2RS1Wu3xdynGJ7eh/nQhlvbc:hApuK7hmV+S1Wu3iG41nQPI","tlshash":"b993f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2026-03-22T00:30:56.219993Z","last_seen":"2026-08-07T23:28:40.733611Z","times_seen":490,"resource_available":false,"data":null}},"time_used":908,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":902,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/js/chunk-vendors.69677fcc.js","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:40.705Z","timestamp":1781714080705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/js/chunk-vendors.69677fcc.js HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 08 Jun 2026 18:48:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a270e73-b5e3d\"\r\nexpires: Thu, 18 Jun 2026 04:34:41 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iDFFEzMTFVOVTKMO9wDbcYl8MWkc%2Bpcv4qO2Axp1QLz%2BaC79dNOw3DPACqg6fuJ6M%2BhB1DNphkYzjjbgUXPuwzkF4C9Tc24W82v5e89ZBlq9JF9ghzB1yUDojL7J3bQD7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d3768c6973120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":745021,"size_decoded":234720,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"a035909d5799d965fe756689afb14d93","sha1":"454f7049d4da5dc5e26ef6e064208fd69b98926e","sha256":"69b190ad2c04b560a27e9d6a6a13e9c890f97339c4a6f676a91b02eb88e0d8c3","sha512":"c9ee1d75c1017137c80b69785098b4b537e86e3edf78b335ec0d02ae375be42703e1d6c3bf47c5cee9864f74e66fa77bcb2145ac8e98e6b5cd140193bf12c9ac","ssdeep":"6144:TjFsoCGGDJz2M5BzcK3hLnR3+Ky577s1F+eV7mLsqSY3CkU:TjFK9zdU3J7A17V23C7","tlshash":"70f4f79cb285b0b607e760f5003f220ba23b6968b40a94d5f275e5d4ad78d8e6137f7c","first_seen":"2026-06-15T11:34:58.9513Z","last_seen":"2026-06-17T16:35:13.877096Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":902,"receive":664,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ultrapexpro.cc/api/getSiteConfig?lang=en","fqdn":"api.ultrapexpro.cc","domain":"ultrapexpro.cc","tld":"cc"},"ip":{"addr":"168.76.120.141","port":443,"asn":137951,"as":"ASLINE LIMITED","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:42.828Z","timestamp":1781714082828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.ultrapexpro.cc","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 17:39:08 GMT","end":"Tue, 11 Aug 2026 17:39:07 GMT"},"fingerprint":{"sha1":"F6:34:65:5C:2A:60:CA:19:28:60:BB:F0:D4:32:BE:9A:AC:BE:6A:5C","sha256":"F8:3C:AA:D1:61:F3:F6:CF:31:A9:99:12:78:2E:F2:4C:1D:7E:BA:8F:D0:0D:37:52:A7:98:40:CA:76:24:15:EA"}}},"request":{"raw":"GET /api/getSiteConfig?lang=en HTTP/1.1\r\nHost: api.ultrapexpro.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/x-www-form-urlencoded\r\nOrigin: https://nexusscorp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS,DELETE\r\naccess-control-allow-headers: x-requested-with,content-type,Authorization\r\ncache-control: no-cache, private\r\ndate: Wed, 17 Jun 2026 16:34:43 GMT\r\nset-cookie: angela_session=eyJpdiI6IjU5QWVxTDY3cG9MWmRyOWd0TzRVOWc9PSIsInZhbHVlIjoiM2RpQ0lRc2JUb25senNvQVwvTFlXV2xGV3l4a2ZEbVhYVTdxZDBGaE10cDg1YVNUb3d0Uk9cL2FGZngxTTJ5TWRkTEIyY21jTkhQU1FTd1BlTXVTTXZJaDJncUFESzhoRnVNUXhvMHVcL0NoUklFTjZIT0dFTXpwazN1OUZQWGpTTzUiLCJtYWMiOiI5YmMxNTZmOGFkNjU1YzY1YTgyMTJjOWVmZTkxZmMzYjE3NDZlYjRhOTcxMDA5NDUyMjJkNDA3MTYzZGQ3NGZlIn0%3D; expires=Wed, 17-Jun-2026 18:34:43 GMT; Max-Age=7200; path=/; httponly\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1180,"size_decoded":1362,"mime_type":"application/json","magic":"JSON text data","md5":"57665906f0b2cecc3bb8a1f1a2f073a4","sha1":"d4b36e5475d8f427a0dfdaecb08b05fc8e38f01b","sha256":"b4359202127170be8b2d04dede5450068e5a9bc517764cf0aacf8f48ce91bb8e","sha512":"876bd6023525a913413029d40338ddb84d5f5e131935d2759fb4dac5bc64ca9118f23578c5716b06e757aed2c0bbe0113bf6c7eeee4a645ae0b3324d4fc630c1","ssdeep":"","tlshash":"7f21f555125c7c3e41b2c1f00f8e161cfb5a67d79464ba69465cacac13288ee310ea1e","first_seen":"2026-06-15T11:34:58.980579Z","last_seen":"2026-06-17T16:35:13.878661Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1041,"timings":{"blocked":-1,"dns":38,"connect":222,"send":0,"wait":550,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/wz662/nav/2-0.png","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:42.870Z","timestamp":1781714082870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/wz662/nav/2-0.png HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:43 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\nlast-modified: Mon, 08 Jun 2026 18:48:23 GMT\r\netag: \"6a270e77-2c5\"\r\nexpires: Fri, 17 Jul 2026 16:34:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHZdw2rkC4ms%2F6GM5gM401QArkG0uR%2B6fTziiJrKqa7mF%2FQGrAztNtpTI5290zdpCBXVPDsIE5NK52v0eliJ1QQnTkXPM4q4akYhtgAyuMsS%2BL28gFmYoUcOPtBH7IvMWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 709\r\ncf-ray: a0d37699fd15120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":709,"size_decoded":1486,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"9bbb66028997142a7b66ba04fd0267de","sha1":"a2317b99448ab6ccbd5061e8f6aed9dd87115b05","sha256":"c5b2f6a70e87123de86cd8e9b4342ad395d1fac5caf0a6910e96d760ea1138d2","sha512":"24569cc605cb0fc7ad81e2776a8012579fddf3520f50320c3e7ba2b9dfe0afac026a01a03035b62037136f1f178d93d9becf75fedad7f931155ac61e19f5e367","ssdeep":"","tlshash":"920165f3f3419ab8a08395f4e1896b149063fb28085f12db4f117062b813c56c9090c3","first_seen":"2026-01-31T08:28:07.135019Z","last_seen":"2026-06-17T16:35:13.880412Z","times_seen":5,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":698,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusscorp.com/static/CharlesModern-Regular.woff","fqdn":"nexusscorp.com","domain":"nexusscorp.com","tld":"com"},"ip":{"addr":"104.21.17.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexusscorp.com/","date":"2026-06-17T16:34:44.481Z","timestamp":1781714084481,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusscorp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 04:29:49 GMT","end":"Sun, 09 Aug 2026 04:29:48 GMT"},"fingerprint":{"sha1":"60:83:3A:EF:F6:D2:4F:87:5B:9D:EF:88:DA:14:69:1A:B1:B6:DD:50","sha256":"E6:A1:BA:EB:D9:22:5D:9B:FE:99:9A:FC:9D:D7:07:04:FD:DE:C1:59:E0:56:F4:90:8B:AB:51:E5:14:F8:22:DF"}}},"request":{"raw":"GET /static/CharlesModern-Regular.woff HTTP/1.1\r\nHost: nexusscorp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexusscorp.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 16:34:45 GMT\r\ncontent-type: font/woff\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 08 Jun 2026 18:48:22 GMT\r\netag: \"6a270e76-57b4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCX4FKGtaEvmLbEFajS2ulDTlj33RozmaQCKfGUrC%2BRg5tBZlGPdPyDXmzDWFGVTXLhmkOCyCnmYqr6F3AExsHIm62GysJd9QIk33Zr7hM275Zk4hFYnxCSkrIDQOom%2FqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 22452\r\ncf-ray: a0d376a40f2b120a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22452,"size_decoded":23189,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22452, version 1.0","md5":"203e1ecea7a09d56f12e371b0c0d06af","sha1":"dca8fcee4e47a5db897df33c91a5b2d93eb4a76f","sha256":"d78b96c40cd112affd6d5cfb13213364f5a86d6a83415413482d22722542917e","sha512":"e188cdc86c1dad60fea30931cc842cd28e864cd6a5c579ed9aca859b5cfe667f54bbd001916899721afd454c97579cd31888dda96885f864b06b0b310e5ed6f5","ssdeep":"384:rrgXZHyled654jIpu9VndfgiESgfryowIbk0zS0njWubljw6GrkiI2q5LSSjxMJC:Nled6+v9VnJ6OfIggWv6Gg0q5uSxMJf6","tlshash":"5ba2e063ef10eb17f1079a58bda207c63c82408c73425e2062a1ee39ba7a67f73115d2","first_seen":"2023-04-10T08:36:59Z","last_seen":"2026-07-24T18:54:48.244381Z","times_seen":254,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":709,"receive":232,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"nexusscorp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}