{"report_id":"c46afa56-c2b7-481c-a85d-876a3204d565","version":0,"status":"done","tags":[],"date":"2026-07-19T03:51:42Z","url":{"schema":"https","addr":"nexira.run/","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexira.run/reward-central/","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"title":"Reward Central","dom":{"size":43941,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15948)","md5":"e3610ee3602b85ee07d048d7e9b8547a","sha1":"127d3c2506d77b32868737eb01849492b218fb1f","sha256":"208b23043147f2e12d09096a59eb3de7da47fe133be079cc35a1b23fce07c1f1","sha512":"6968a0190555800c9aa1317e31ecb7ec2734cad272d04e657719bb5e9abdcc5ad5597efe1a203c1b6d9334f9399ee9024bf1877d1d21f1bd43e52b6a8b6176e6","ssdeep":"768:tMzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwcQ:tMzqyrYZ1x9Ec1cfcbc0c6+","tlshash":"09132024f9e0493b7627e1e96ad1cf4c671161038e462a9cb5fc65c1eb8fe730973168","dom_hash":"domhash425abf1f526b698e0780202472672fe9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nexira.run/","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T03:51:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexira.run","ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":23,"request_count":23,"received_data":830870,"sent_data":12322,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"massons1.icu","ip":{"addr":"172.67.170.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-30","domain_rank":0,"first_seen":"2026-07-19T03:51:43.525776Z","last_seen":"2026-07-19T03:51:43.525776Z","alert_count":12,"request_count":4,"received_data":1014627,"sent_data":1891,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexira.run/reward-central/","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48150de4634b374fbef5f7e3f1569b20","sha1":"db0497901287157f119235f8b4749d1954a8eb92","sha256":"65e8089783e77f28aa3e74c9a63e9f9e9d15839d7a0715237212cb6610bab7bb","sha512":"8675fb99f18867b61045ceb9fa8edf14739e87ff28a6e55d4cc26ab300216c94b066fd3541b8dc835570b2191aa11d28da9337318354b137f292153dbbfbdf9f","ssdeep":"","tlshash":"9bc0123a8119503e0c2131b6d65057c254cd216ad046cc09746c848167c58279fb1861","size":182,"data":"","first_seen":"2026-07-19T03:51:53.927963Z","last_seen":"2026-07-19T03:58:03.063882Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"massons1.icu/_nuxt/assets/index.js","fqdn":"massons1.icu","domain":"massons1.icu","tld":"icu"},"ip":{"addr":"172.67.170.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","size":1010117,"data":"","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-20T18:00:28.149684Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"af304c227e3b5b828e78a3a9c782bd33","sha1":"02db97fc140d1d2ca35df2815f5136cd46a12f8c","sha256":"fa25f86a98a44bee39aad0580dde6e8bccbc0c29bfaaa9c6f14e2a6384673b39","sha512":"31fe00d848e46a5041e141530b88599c86f20c8913f6c6e8cba931354d9d6e46bcd5aae6757f92353157e337f0fbf171484b62b1809c2a61130a0f2099100571","ssdeep":"6144:d+Frzet2WVKH7z4qF8ZyOBHU3eNDqwoYRZ9wBqGPw4KLWo36rtCCOx8PTjGKPHEo:d8e8WaX8fdU3bwoYCUx87iKPb","tlshash":"d125705112cc5a6f2f4083c738f5489a1e29749acccd087bb6d4d2c5de6af1db2af690","size":974515,"data":"","first_seen":"2026-07-12T18:49:06.899666Z","last_seen":"2026-07-20T18:00:28.154489Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.16.23","filename":"https://massons1.icu/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":803503}]},"http":[{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhanimedium.ttf","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:14.120Z","timestamp":1784433074120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhanimedium.ttf HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:15 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l15M3Jy10H8jFRjVq7LWgb4HLIqzN8cO71AJf1xY70mDF1peNR6k2LFs22nyVFT508o6TTe%2FBRL2rkN%2FCIl5mZ4A1W9GdeNTDUm%2FcoZdfNuIIgDSfqjHnYU8uoM4\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d6c4393bd63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":830,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":996,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhani.ttf","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:14.122Z","timestamp":1784433074122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhani.ttf HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:15 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fE%2BXrGKCY8GFT4WZzk8U15vj4E6Jd9okJvwaIszeiPqI0ZeYk2p8vThJhGtT33Si0hwy4nG97dMyAWHleZ4MaEX4PFRhUJcQwS7dVMV9m5YR3moxyDL93qggmcGy\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d6c4393bd83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":826,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":996,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/styles.css","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.250Z","timestamp":1784433071250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/styles.css HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 03:51:11 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 20:51:51 GMT\r\netag: \"9197e-64c9d92784693-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hTsEpnji91XPHShhsr7BdaBPrAHCaY%2FVWX3L1sWvwxh8YjTtsNYRVO9qns67886vGhmwJXwJ3%2FoExxMDHbN3x3pfDjIKxKz3%2BM9GtFCXaMv4OFKPYUYwVJRD%2FQJI\"}]}\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c4274a983181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596350,"size_decoded":60838,"mime_type":"text/css","magic":"ASCII text, with very long lines (34068)","md5":"56f94fcd0e5e05e3a55498937f27f6d6","sha1":"aaa4fb6a076c5ce637dd9f75aab58be0c570d0c5","sha256":"f99f3cd1c9c27874ef007d1a4c73219494a120fb7d52aab2478852edb2990bb6","sha512":"313c732d5cc1ef844d171a3d9867b25fcf547f0eb18e9e52be0837794c366af39d4e53120c318407d9184cff6427f752bf43dacc6029524b8abcbac959c659e3","ssdeep":"6144:CHUJRCJ4LTLBw3shgj4yhvTGiR3zYAFIjZz3:eJ4LfSTFR3zYAK3","tlshash":"42c419f5660c60996406d3f9bf2f1dec152a74e09b501ba9e66c342cc2db2dc1ee3b85","first_seen":"2026-07-19T03:51:53.910725Z","last_seen":"2026-07-19T03:58:03.059967Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/img/x.svg","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.264Z","timestamp":1784433071264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/img/x.svg HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 03:51:11 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 20:51:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIptqN5zoW9QQe5fRwVUByxM9wjibNGQCABXciiPKsh5qHnEzouMhSAVFtQcZ5GWXoYItO%2FEGhkMFtvYWAOUkMZysJcG8hwArMipbACjgLaogg7whM1%2BeevAo3%2Bl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"175-64c9d9210c263\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c4275aa03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":373,"size_decoded":936,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"64afce8643e1b68eee7107bf1c5fd04c","sha1":"db09e5040d227f5c0873151a5f7f012b3da02509","sha256":"83cd06cbbd757b2acbf185e7258d56c1ad6768e38fbcbb5dcb3fd25b4c9a6ec4","sha512":"b774f34f8cfa7a2874979ec92dab953d8886fb3bbc9465f6e688806914a06ad54b5f52beb5b3c33a5df1c75a64d5634a780d8f485739f0cf34a9b43811b2d840","ssdeep":"","tlshash":"79e061e05068ce46d00e9030e73c1652a43790d6e24c0de966517558fc945914559dda","first_seen":"2026-01-28T05:19:27.989089Z","last_seen":"2026-07-19T03:58:03.057767Z","times_seen":8,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massons1.icu/api/is-banned","fqdn":"massons1.icu","domain":"massons1.icu","tld":"icu"},"ip":{"addr":"172.67.170.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:12.575Z","timestamp":1784433072575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massons1.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 13:31:21 GMT","end":"Wed, 26 Aug 2026 13:31:20 GMT"},"fingerprint":{"sha1":"E4:0C:93:7D:40:B2:81:D5:A7:DC:B0:73:D5:BE:78:72:4E:FD:04:BD","sha256":"51:B1:99:29:59:CC:F0:05:C0:22:A1:EB:D8:A9:5F:E1:5C:5E:64:9D:C2:48:8F:77:63:51:6C:0C:A1:66:B0:47"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: massons1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexira.run/\r\nOrigin: https://nexira.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 03:51:12 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkYBHBwotXGXuF4adHJJQV5OQBfizyDfEDLZqAcwJBhIuUPTl7adOxtLxAOm6eDigbT9C7Jl9Wbk8OMD158nTGWF6145HglQ7qVSi8OTglTZEDRDsjsNhQQpjkuNjgI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d6c42f9f08b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":750,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-21T16:15:50.219264Z","times_seen":117903,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T03:51:10.608Z","timestamp":1784433070608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Sun, 19 Jul 2026 03:51:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: http://nexira.run/reward-central/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmbHeuYohXu6oDaJPTVScXAA70gkb%2FVc8NTRJJKae4UbPYZtLVhh5UYG9ZGo3dqajTa7s6mnRv%2FapEzWPLWsgJU7nRIU3NgimXUYsE9X820%2F%2Fszz3sDU%2FyKsYg9%2B\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1d6c423de0f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":72,"connect":2,"send":0,"wait":87,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhanisemibold.ttf","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:14.118Z","timestamp":1784433074118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhanisemibold.ttf HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:15 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2ByAyYm2PDNSx%2B8Ki%2F6rJMcTARP6JiuU3TXC2BXgXWN5yIIhdp6DJsncHsXE4n7RzPuSIQ2Ey%2BwR%2Bk80dwyxtKwTmF2XE08bMr1BJAVyvcfw1Jqd3pjqTyQTSPS9X\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d6c4393bd53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":834,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1005,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhanibold.ttf","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:14.125Z","timestamp":1784433074125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhanibold.ttf HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:14 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=InedGDASP7VBXsVu6yfTak2qtaSdSShNImx9%2FDPjk1hXdRyPFUjh79HRhX0yZMcLYO%2BLYJOUQm1599CPqRDRjl0%2BAWdiDdRrtYM4qPbbskc4DBQnyBarheUAehWl\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1d6c4394bd93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":830,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhanibold.woff2","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.471Z","timestamp":1784433071471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhanibold.woff2 HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:12 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GfGSnVfsSqX8bwUB3lsjl%2FkEnpiz9qIdFR7bYULKffMZoF68ONKg3qkhrqek%2B%2BksLoIhFETtK3WyFF9peXKePiMj%2BoytxfIFwYmGMjq9qvl068DWp%2FfbG1jEK%2FUO\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c428aab53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":866,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhanisemibold.woff2","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.473Z","timestamp":1784433071473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhanisemibold.woff2 HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHUPOYwfAdco3ET3BXX8ctvcLwWl%2FjQrXEOQApH8bi3OrTtamJRoQ6CHUI%2ByTx%2B4FJ5mT%2FhHNdYA5kUqbWQnLmtLiKm0T84y574Q%2FjOL%2BiyyTIbh4%2B7MLnB7atvv\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c428bab73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":868,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhanimedium.woff2","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.475Z","timestamp":1784433071475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhanimedium.woff2 HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2c3HpNfqzznlAQI9aEtYqRSCPsa73TygOqiT5%2FWbHi3LE%2BISjZl3bXBmlLe2MFEL%2FCnoJSvvmstDM81DuXzAIw3hQn%2Ba43yK3azwpluGx4stH%2FPLRjn4C9z2XX9\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c428bab83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":864,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1628,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhani.woff2","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.476Z","timestamp":1784433071476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhani.woff2 HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=af%2FzZfOq44bx8tShT7RlNRcSp5fZTs5mIESBCG4JwINe1lmblQyxIRTTF7bfqj9hSirCZTrAngp%2BjS0nMQBkOTzqGOaCgDUcIlEh1kXWKYjfokPCLdpUKq2r%2BA%2FH\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c428bab93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":862,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1629,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1629,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:12.533Z","timestamp":1784433072533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Jul 2026 03:51:12 GMT\r\ndate: Sun, 19 Jul 2026 03:51:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-21T16:25:40.239132Z","times_seen":34884,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-19T03:51:10.797Z","timestamp":1784433070797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/ HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 19 Jul 2026 03:51:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Mon, 30 Mar 2026 12:36:34 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0A1DbdAO8EKpCnEwU8ORGQrIzF4%2BH%2BPT0xInt0ZDz66VAg7%2FZuBhmGKS%2B89XbzeGRhFQj%2FGolsLkZ3K2rrQrOgR3C2bCq9dhyyQnSkzKFiGpf4TqeT3bkrLEKBZJ\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1d6c4247ebf1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":28290,"size_decoded":4680,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (404)","md5":"bfe1701268710c7b43fd30cd3bd2e83b","sha1":"eba70bbd1cde9943a16ad53bd87a306dcc3f4f4c","sha256":"48faa4b8e86da1f765693f23caabb4dbdd7381366cb5aa632c0d4c530d22d3f6","sha512":"0e45ed6c9cd23789a384d59b651d2ac59fef941feff80e6f180f3e0347d54d2673d95d07b5dd4fb2fb20abc0c58b828b71d0603dcffae7cfb82d24f584bcaa24","ssdeep":"192:tFsH920Mnn0CNquSAnsoYl5mq5mmmzm0mBR8PTBBa:tFAk1n0CNHSOsoC5mq5mmmzm0mP8W","tlshash":"81c2423456f0155a8177e2e0bf729b093f128613df9508e9b9ed2b91ef8fe0215331a9","first_seen":"2026-07-19T03:51:53.916703Z","last_seen":"2026-07-19T03:58:03.061193Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/img/hero.webp","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.258Z","timestamp":1784433071258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/img/hero.webp HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 03:51:11 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 20:51:44 GMT\r\netag: \"1c838-64c9d920b6361\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nS8ZLxWFukhGFZGahVriJV7GC1%2BGxQi0VP4%2BnzE0rnZSvbsh2vrqKJdR8ZSoWPXJXZyZST34ExbOn1H67syLLA18nMcXollhExoEsls8DdwAxHP1wIcaRldbmJyj\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d6c4275a9a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 116792\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116792,"size_decoded":117451,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce7933c921a19e4e7d8245e267072c37","sha1":"553c2728ce2615f3c336fe9dd0ac47323c6dbbf4","sha256":"da58e9fd5a0efe61697ad204856be8971854c46254d43f9cee01363d4886af24","sha512":"6d3715f1b7f3262ef54d9356e664a82a70295b0db59785c6e0d60ff6cda9276cf55ce06c833fdd0b638b6308dbce07b0e0aaedc2c0a3f9666960e9cb66f038b0","ssdeep":"1536:Yfxq7+f8nb2EX/yFr+DiWEsLOQUieXDqslDDbCmt3XUT/Wdfa6LPrCZiCc9vb:z7BniEX/syOqgDqslT3rd7rrCZiCc9vb","tlshash":"bdb312863aab04bd457dc067a8df94804a9db6e71700bfa14cfc0ceaeebf4a21c1540c","first_seen":"2026-01-28T05:19:28.00688Z","last_seen":"2026-07-19T03:58:03.063188Z","times_seen":6,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhanibold.woff","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:12.638Z","timestamp":1784433072638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhanibold.woff HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:14 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bGeUGQI6TIu3InrD4%2BmdcA7FPuBKeruEyI%2BgBmh9A36tcjUbMeQgk4ly18GluMB5rHINj4K2D7XrCKub1rVO8GabpnXtSim3md43%2BWKjaluQEGYflLTtDPcGrpF\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c42ffb453181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":860,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1481,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massons1.icu/_nuxt/assets/index.js","fqdn":"massons1.icu","domain":"massons1.icu","tld":"icu"},"ip":{"addr":"172.67.170.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.251Z","timestamp":1784433071251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massons1.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 13:31:21 GMT","end":"Wed, 26 Aug 2026 13:31:20 GMT"},"fingerprint":{"sha1":"E4:0C:93:7D:40:B2:81:D5:A7:DC:B0:73:D5:BE:78:72:4E:FD:04:BD","sha256":"51:B1:99:29:59:CC:F0:05:C0:22:A1:EB:D8:A9:5F:E1:5C:5E:64:9D:C2:48:8F:77:63:51:6C:0C:A1:66:B0:47"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: massons1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://nexira.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 03:51:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 12 Jul 2026 10:09:05 GMT\r\netag: W/\"6a5367c1-f6f29\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BABNZi2vxeJwkj8bvfmYsSBS3skMddK%2FugsJBqFllL8VpmGAsCWoeEGSEOLrmzUJ2LSOEdzBTxcTRecwMZzaiZwQwKYwxTyoe7ZvDDNN32BIZ32kEqOu%2F6A3LBkK42I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d6c427fef1b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1011497,"size_decoded":244327,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63260), with no line terminators","md5":"df04374663686eead38b85f1019e156b","sha1":"e762f75876c64911122e4a616335acd1629cef19","sha256":"d831fd6664829745fcebd2b22b441b2b5bd4bd081bc93d5b997a652ec6cc3be9","sha512":"9a1e6dc86ab4eb1d530eed7d795744d94a76a3efa6cd07b4c8dd9e3eaeceac3e2061f01d1e36dbeb1d7c4eb29c9a4db0e5c1eb93de45683cb0b206ccc03646bf","ssdeep":"6144:bORVStfnq1iGN0djJ05e8r02H3n5t7i9cI3+XKYPR6IhVXz8lhcAm73dCdoaxBaD:28q4GixyvumOPmeRQoqJhW/Ky5J+Ei","tlshash":"4e255f6312cc59af3e40afc728f11c351ce9749acc08087ba296d9c4dd66f69b76fa50","first_seen":"2026-07-12T18:49:06.888305Z","last_seen":"2026-07-20T18:00:28.149684Z","times_seen":98,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":90,"connect":17,"send":0,"wait":299,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/img/tel.svg","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.262Z","timestamp":1784433071262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/img/tel.svg HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 03:51:11 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 20:51:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcJmj0wO8GlLRtC27KNqYhZURxiiTlOlFFdCdm5qRIhhHxwuUUaUSz4no8d3gviIK%2FVdmHnGSUPpXt1rgo0mWq7xyEONqX2WbVFT3S0U0H5GFAcV5uHSFytIcakb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"21a-64c9d920f0ce2\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c4275a9d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":538,"size_decoded":1020,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8beedd8b1c38fe83ee73de814403615","sha1":"47c0997b96a63b28e501add55541c3a6dcf96ad6","sha256":"6d6e7ea8e3a6195bdc18d0081e96e5aa4f1ed7bd28898234183033428b574354","sha512":"73fd65a93435aaf0c616cbb04a9add4eb0fde88d1834d38528e3eb8ae83e4f8f09c5557c0673a312a3a78a25c1456b2c49e70c03ffced604ab2590adc00af201","ssdeep":"","tlshash":"a0f0c072a04ae6b0c009d7549d2b74755756f0f9ab94d0c4c6717342f7540f2dd1ac6d","first_seen":"2026-01-28T05:19:27.970481Z","last_seen":"2026-07-19T03:58:03.06056Z","times_seen":8,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhanimedium.woff","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:13.111Z","timestamp":1784433073111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhanimedium.woff HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:14 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Y26ALnrXMd2n%2BpsV45ra7RVgKhJFLIawHfWz9QuJmHJ37DM81R8sjVxNlh%2BTJhe3fRYInVZo32%2FvV%2FNPzMcprULQffMCzsrUwGBRaoJVjCi1%2FOyJ2zDbNgZuqyn\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c432eb8d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":864,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1000,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/img/no-connected.png","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.259Z","timestamp":1784433071259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/img/no-connected.png HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 03:51:11 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 20:51:44 GMT\r\netag: \"c63c-64c9d920cf9a1\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3AL9mttZxURTEis2bxXtoH5jwcZbTd7ywrGeggOT6Aspft2bPwXEWNb2yyWHD2JCNZS52XDCuGr9FBcNjJCVJAnQMoENFE2Xclr%2BOIKyhtQBLMGVxbLMnkSUGCM\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d6c4275a9b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50748\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50748,"size_decoded":51428,"mime_type":"image/png","magic":"PNG image data, 419 x 418, 8-bit/color RGBA, non-interlaced","md5":"579c98a5fc174a343eb1c15f8566a8ce","sha1":"51c9942e51fb4541646a735a7017801551cc0e54","sha256":"d3fa03b2b1131db3a8c73d114688a458a2e9831c31ce7a890dfc58f6be70f62d","sha512":"2b40402e0bca9132680f4a922e68f6268a8dcc72829bae8faaa0e5012007199d961282e322ea49f68c4e496a8cdf58541ba8125829ed7840ee08bd2297dbcb13","ssdeep":"768:kbg2WN5oKRRE2QuR0FlBU1KaAduS8W8XVqfZWnkL8UmT3cf9zNgrKCb9+YoKXuY:0yBQuFkaAdF8W8XSQUw3cf9zarKojX9","tlshash":"273302bcdf046665034f1085576d68e8c04f2be6c8a43a123ebe4c7ceb0b7911a95b3d","first_seen":"2026-01-28T05:19:28.027534Z","last_seen":"2026-07-19T03:58:03.057225Z","times_seen":6,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhani.woff","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:13.113Z","timestamp":1784433073113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhani.woff HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:14 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWfhV4drwua%2FZFPKpnFnSfKz1DkftOjB0gBipZW%2BgyJWboGqeNAIcLDhB9D4%2BO8QBD%2BxhSYThh8QxQfMlMAkIBnyCafhBNnWK3RxUcL4A5BK2i%2ByKHX2l7wilSdC\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c432eb8e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":864,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1000,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/css/Rajdhanisemibold.woff","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:13.259Z","timestamp":1784433073259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/css/Rajdhanisemibold.woff HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/page_assets/css/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Sun, 19 Jul 2026 03:51:14 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hE%2F5N8E%2FUc8QVBFPnYfWSwKvkcaZNtf58FIUTCtm%2B7FYEGoXBB0pfaH2rY3pLA%2Fw8mX3DmeqbnaARkRhfh%2FfBAsf3V1mvHPs6r31MIfP8b%2Fq0s%2BXZHf41353SNzw\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c4340b9c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272,"size_decoded":868,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"6fe35864fa3a21ebcad5da624df1cd54","sha1":"1c65d44572b05c0a46f6aa6f478bc24d061544fe","sha256":"adaccdd858da1e72b08b9a4e21ca96f6a3e2d751704af6d13284cb93bf67434e","sha512":"4d7b721df27215a78c2456e76d4d1bbd6d19a5dc83609351e008ad4405726d011170a6de323f4f7d05365fbdf9a3b027b40fcc52d66d599e1dd5a11241b75950","ssdeep":"","tlshash":"fbd02b9e50437387481214a079c525c2268c12f6a43a41a86d86d4c75298a3ecdabadd","first_seen":"2026-07-19T03:51:53.909635Z","last_seen":"2026-07-19T03:58:03.051859Z","times_seen":2,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":850,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massons1.icu/api/visit?origin=nexira.run","fqdn":"massons1.icu","domain":"massons1.icu","tld":"icu"},"ip":{"addr":"172.67.170.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:15.136Z","timestamp":1784433075136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massons1.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 13:31:21 GMT","end":"Wed, 26 Aug 2026 13:31:20 GMT"},"fingerprint":{"sha1":"E4:0C:93:7D:40:B2:81:D5:A7:DC:B0:73:D5:BE:78:72:4E:FD:04:BD","sha256":"51:B1:99:29:59:CC:F0:05:C0:22:A1:EB:D8:A9:5F:E1:5C:5E:64:9D:C2:48:8F:77:63:51:6C:0C:A1:66:B0:47"}}},"request":{"raw":"POST /api/visit?origin=nexira.run HTTP/1.1\r\nHost: massons1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexira.run/\r\nOrigin: https://nexira.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 03:51:15 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5B1NAHhWHd0sLD1WXRLC%2Fle2XjLAy8rNt%2FttoAw8EaBsP1MXHq9sXonETaFHVfwEtHw%2FQl2A6jMpjvSAJmTwOQDCryqRpi0kupEw4Rx6IkHbT8g0hIVHZqMhbJLTsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d6c43f9f37b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":720,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-21T16:13:42.514243Z","times_seen":440340,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/img/new-nexira-logo.png","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.261Z","timestamp":1784433071261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/img/new-nexira-logo.png HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 03:51:11 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 20:51:44 GMT\r\netag: \"72f-64c9d920e5162\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLZUUCDkpV8UkhvwtzjgZrsdUqXpLmKmVvribp%2FJlIs9%2BqPvR%2BU0ZNP2bZejJV3hhsdvyq1ZL3coclEDgjJsVxvu6lJaRCHM3ZVSyS09wiLwNDSRVoAKKt%2FrUN8M\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d6c4275a9c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1839\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1839,"size_decoded":2523,"mime_type":"image/png","magic":"PNG image data, 252 x 70, 8-bit colormap, non-interlaced","md5":"4e0b26ccfd50485053b3007d962dc5cd","sha1":"d88e9669feb1511251d7be3d1ebb9e778619ad60","sha256":"639db636cede84a11ff4c86ebdbe8abd04765829a5b72f0d547d3f80e3e51e10","sha512":"6819757626088435d5e490eefeb16660036c1e752cd3bdf329218643b0ba7c89b784aca2bd469cdcc582254344fdf50c8c7d6ef24feba25876bc431d69cb7b3f","ssdeep":"","tlshash":"ab31d7f76207866a932d4783b7e9b62bada1dcdd0e1840b2a1043ded90b25266941750","first_seen":"2026-01-28T05:19:27.977281Z","last_seen":"2026-07-19T03:58:03.061779Z","times_seen":8,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/img/dis.svg","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.263Z","timestamp":1784433071263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/img/dis.svg HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 03:51:11 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 20:51:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5b0P1T9xF%2FZPZFu38WKSK7MqpqgHPVPyZHSLc5MSHdEsWGKbme5S8cyiYBNZz%2F%2FlrzHh9e5SCeMnHE1jFDxiaFIqzGeccU1uC4cpJzTZNxISGuAU8gFhgN%2B6TFfD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"7f2-64c9d920fb8c3\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c4275a9f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2034,"size_decoded":1600,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec7b3734f0b53eee4efe5643ece29df4","sha1":"a535e351746296cc7d7b0f89d97c363c5f4e020e","sha256":"432e4fd44b46523c9173e8453eff1459c2e292bb7a726751b5f2c6ad0103c529","sha512":"15f8010459500a3d698411aa5f79c9a5e47753e76d0352987106c76cb480ee3f281f25afc5ff3d81d24060b03bd60ce6d7f145d71b739af35df930053e24b7ac","ssdeep":"","tlshash":"de4122efba5992d0d40bebf8ed364406a6de70fe7f52c286424199d0da403e58c1ac08","first_seen":"2026-01-28T05:19:27.979264Z","last_seen":"2026-07-19T03:58:03.054243Z","times_seen":8,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/img/fb.svg","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:11.265Z","timestamp":1784433071265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/img/fb.svg HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 03:51:11 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 20:51:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3szBNfsxhL6D6Ge%2B8q8dFqAEeVbaSAXK673boqM6jto1GfiZ9aXqSdYWr9A8BPLenbNnwYJu%2BARGtsqck8b4bwnKaOdl8P6vJdDDba5W1cDXrTrQnZ6OWTg99gBJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncontent-encoding: zstd\r\netag: W/\"2f0-64c9d92120a84\"\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c4276aa13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":1105,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afaa09252d49547ea6a11c0710f03c8e","sha1":"f97368edd8d0480d6761f2286cdbf99da75f936c","sha256":"15068399f26aba2fabb606666c7c2cf17aaaaa6b672f15afb8612ef68f49f311","sha512":"82251ccc61ee80f8ccd8cbb68d2c0b5fe4846df6d7a9c2fb93e510aaf66d673f40b3264b390afec44e48f8c8eee2b3e594d013183ae6ed4c9537ed78db982718","ssdeep":"","tlshash":"4c0110f231acc8cd9e498374262434a81290f5bc7908c044e7c83286f91e6734d700d0","first_seen":"2026-06-19T03:30:37.529367Z","last_seen":"2026-07-19T03:58:03.053561Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"massons1.icu/api/config","fqdn":"massons1.icu","domain":"massons1.icu","tld":"icu"},"ip":{"addr":"172.67.170.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:12.576Z","timestamp":1784433072576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"massons1.icu","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 13:31:21 GMT","end":"Wed, 26 Aug 2026 13:31:20 GMT"},"fingerprint":{"sha1":"E4:0C:93:7D:40:B2:81:D5:A7:DC:B0:73:D5:BE:78:72:4E:FD:04:BD","sha256":"51:B1:99:29:59:CC:F0:05:C0:22:A1:EB:D8:A9:5F:E1:5C:5E:64:9D:C2:48:8F:77:63:51:6C:0C:A1:66:B0:47"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: massons1.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexira.run/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://nexira.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 19 Jul 2026 03:51:12 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XBgkd%2BGO8Ilx91VXMAW4gBGLc21Ulpo2gv5ui%2FDcVpdwj45skmhv9z8usn08M%2BS1l7fcJBMFME2hcmBcwGT58W0Ozd7PKtL8WnxIW04bGuJSwzpaP7rFmSVhuaZGnzE%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1d6c42f9f09b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":909,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"7cba05b29fe0c9e85d0908218f6d4dab","sha1":"c295ff062436ae228d167d31b7be5be6e2a830f1","sha256":"816604834800687011dc8f8a18aa820af6c7c8890d247970647407d085e131b2","sha512":"5d5855347e2e6046353b053f16c061a943f3b72fa74b12f1def1d49b2fd6af44e499559876e40c1edb0073d1e2e59d6ad863981cf3d5060cb4ab94ddecf8bc19","ssdeep":"","tlshash":"26d02b72d31d6e26576635b1387c00c412226ab7d70f971eab095484874a1aec7cc289","first_seen":"2026-07-19T03:51:53.926109Z","last_seen":"2026-07-19T03:58:03.054885Z","times_seen":2,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"massons1.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexira.run/reward-central/page_assets/img/favicon.ico","fqdn":"nexira.run","domain":"nexira.run","tld":"run"},"ip":{"addr":"104.21.9.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexira.run/reward-central/","date":"2026-07-19T03:51:13.659Z","timestamp":1784433073659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexira.run","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 03:19:59 GMT","end":"Sun, 04 Oct 2026 03:19:58 GMT"},"fingerprint":{"sha1":"36:39:1A:40:6E:A1:CE:0C:AE:C6:4E:BB:85:8A:86:C2:39:DB:39:BD","sha256":"4D:DB:52:BC:E1:7C:75:1D:F5:93:84:95:BF:63:02:D3:1B:31:35:E8:67:02:1B:60:7F:C9:E0:25:8F:8F:EC:98"}}},"request":{"raw":"GET /reward-central/page_assets/img/favicon.ico HTTP/1.1\r\nHost: nexira.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexira.run/reward-central/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 19 Jul 2026 03:51:13 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 09 Mar 2026 20:51:44 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnJtWqd5FgFvJ3dJUcHS0cmGA7ASwDUO%2BsQt2YebgeRFYdPP1bFRox8%2Fooeeib6BezHauCGkT%2BtVtvWugudwD147aTI13fm1sQNZiz9bBhy6McwxwrzR1jHwTgq5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\netag: W/\"3c2e-64c9d921352a4\"\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1d6c4365bb53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":4408,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"169dd8d08e32bdcd26a7de286f8330be","sha1":"a1d17c9bae9d3c2e6c1c9c4d9728325d36eedd7e","sha256":"a19724e61f15e9088eefa11bd393019e36903073e33d4d5ebe431ed60bcefe83","sha512":"d40d683c8c296ee7d88db86825c7000bc5fc193337b186efb918febee2c5a3facab94cc9bdc9f39bb9f9dc63677ce966af070077f95e8d6545172e94b66efc49","ssdeep":"192:dNI22M22qieaxnaZmX229222250G2222y22222222Se222222222222d2222222i:Jlpcy4nHubI","tlshash":"91622faf73d94b22d0d5e6b26b78d24d3a16fec2143c6542c41f313febb50aa1e6011a","first_seen":"2026-01-28T05:19:27.9751Z","last_seen":"2026-07-19T03:58:03.059188Z","times_seen":11,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-19","alert":"Sinkholed","trigger":"nexira.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}