{"report_id":"cbec2ad4-b3b3-41a8-886b-4225c5aa29bf","version":6,"status":"done","tags":[],"date":"2026-06-01T14:26:07Z","url":{"schema":"http","addr":"nivex.world","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":0,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"nivex.world/#/pages/mine/login","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"title":"登錄","dom":{"size":215844,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10974), with CRLF, LF line terminators","md5":"6fb463d455c0dcfb45bbaa21ecd9f23a","sha1":"df4ba50b5ba1cf7a26d0d3675ae28c003c3f3549","sha256":"b4ad236624511c5462725fb0cd6c8657680c4b57bb784857f573c3fff421cab2","sha512":"3d06d208fab503dae17ea8fe13ac1d8b78d764c1c4c6bd8a59a7bb33644eca50085f57a82225d0426523cd93c727432b16d632c9b20a6751a75c9dfe10a355a1","ssdeep":"1536:xQShiHfGGxjdZXEn8rHx7/f1E6VVjiCLbQqwZsZiQ+KTlsrMHikSwgItR7lxlNVr:j4pf+KpHikxXxxlNPsoKkdn95W956Td","tlshash":"b7242d31b20a382a7537c446b4c0db5ab615e733c15246e9ff693b3acec6de51632b48","dom_hash":"domhash8166ec8754cc17a3cdcdf322f1583cfc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nivex.world","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":0,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-06T14:26:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"www.nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nivex.world","ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-01T14:22:15.855582Z","last_seen":"2026-06-01T14:22:15.855582Z","alert_count":52,"request_count":52,"received_data":2206644,"sent_data":23458,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"3.5.157.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-05-31T17:07:40.417249Z","alert_count":0,"request_count":3,"received_data":4720,"sent_data":1356,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"tongji.dcloud.io","ip":{"addr":"122.51.115.20","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-06-05","domain_rank":2039554,"first_seen":"2019-11-22T07:30:27Z","last_seen":"2026-05-27T10:22:34.326499Z","alert_count":0,"request_count":1,"received_data":219,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.nivex.world","ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-01T14:22:15.860673Z","last_seen":"2026-06-01T14:22:15.860673Z","alert_count":1,"request_count":1,"received_data":312,"sent_data":592,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-05-29T04:51:42.491915Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nivex.world/#/","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"a032703a87c82cc17aea9936c2501384","sha1":"eb6adab4fa7823f11a1f66e71f7c38e4184c2846","sha256":"86a2382b747dce3e7a086e9043d538d90d34d0cc6597d2e1e4c27d427e22a4f0","sha512":"d80f90118388b67b1db53a69197beb331853305915dfe4bdb31abeb935e3434e220acbe12e54e59d85221fa5b79f7a860a15d579490dcfe90e20cf0b23d4151a","ssdeep":"","tlshash":"7ea002c880c6b0110f36e3223f033320320d9328aa0ed0ca8c20020c3213833fa000a0","size":62,"data":"","first_seen":"2026-06-01T14:26:11.365554Z","last_seen":"2026-06-01T14:26:11.365554Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-financial-detail~pages-home-home~pages-market-market~pages-mine-capitalPwd~pages-mine-login~pa~fb9f62b2.57399966.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fb88e43f3997b33ce0b857830ae690c","sha1":"3f907a33ad0766ae4fe2998b91efe633b13e0531","sha256":"752d5a7e43615f023cf99e73c68c9f3987f06aa0fab584303df0c389592e2227","sha512":"ab2d451a37b63ec9d15247bda9ba8a3e5e531f45b9a5b136d530347769054fbf3cc26f1fcdbcfff6890deb6dbe2b29179beed81b3b04afdc99bb101a36e3a60e","ssdeep":"384:jxMFP1D6Sx3Fm+jcbUyHToK8rbUXpMkfB+kBnAx28tStrB:tMFdDZFLcY8oQMkokBnAA8tGrB","tlshash":"4813c91cf1ca7c731e974480848b9206a36f6d6a6ca16c82b3e5d7decb79a4d012ff15","size":45389,"data":"","first_seen":"2026-06-01T14:22:23.825309Z","last_seen":"2026-06-01T14:26:11.343234Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-mine-login.11d40f79.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed96dafbeeedf0a2e3b50c79b0b159f4","sha1":"ff8acbaa0a3633472f2c30cc326ad10049bb157d","sha256":"277313f9393290306c02d1d123d1aa25560dcecc98aabc7730acad61504922a4","sha512":"13c28e874eccdbe992bc2e9b1f293058d568759d60ab27436830be470f186bda079bb6eb110c03d33b994661e99e6f15c65a86f4cde72064f92eb1abfd716191","ssdeep":"768:mwbz6WMj3qioZ1ObbYl3DZvlviBgsLOh5y/kSXD:Dv6fqioZsPYlTZB+gN5eFXD","tlshash":"8a53b446b086f84f8c7ad14c602e641210693eb6f0d9461aefe5f3e5a9f55cf226273c","size":60779,"data":"","first_seen":"2026-06-01T14:22:23.856392Z","last_seen":"2026-06-01T14:26:11.366985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/#/","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"69a9764b85506fb2111953ff59c2ebbd","sha1":"5fd8a58ffc0d9f9d165fdaa33441b4cb85e5192f","sha256":"54233468de534e3277f7f475ff8151bf1bf0eadf7e8f67b6759b750f21b32d4d","sha512":"5d51f99c5fa33563c80b0386247c557360df12021fb9880cc9f111216e04d69563dfc89192a51e946fdc312626a8a9c52f64e4897fac8bc4f2abd484c7ca7196","ssdeep":"","tlshash":"58d0a7d598d784756bf6c36d0012ba6532049124bec684cd5c30494d60c74514549d80","size":213,"data":"","first_seen":"2026-06-01T14:26:11.367923Z","last_seen":"2026-06-01T14:26:11.367923Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-home-home~pages-market-market.67aedcdb.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"26e4919f2f86c489ac7cef2b87a00229","sha1":"f6447782c1d063a67a32eaebf82b4203a7418542","sha256":"8a83d4dc93c17e5dc45dfa126ed0d71d99177a1df0e9dfb1c4176678812faf9c","sha512":"e4adaeec1f1fcb6ccc64753f2672bfdd9c34091409d497b6caa12f8364ea224de32406cb38ef0ac35e75baeef019cb3ad57941a52773617dbd8a1ada64ffd0b4","ssdeep":"384:byHr/rSVbnxEyuYAU+oz8QMW5ye9z1geoKiQGaAHdeU0/tdTTnOEP:byr/6Xu1Y8Iye9RgeoGGHdYHnB","tlshash":"dfd20909b087b40d48f3d55a787b562c70f13e6990095066eaf2c99e8dbddeb2523f88","size":28846,"data":"","first_seen":"2026-06-01T14:22:23.757002Z","last_seen":"2026-06-01T14:26:11.344974Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/#/","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"ddbf8b31033d5f081f3e2ff33a96b613","sha1":"c637fbefde7ef58665751dff2fb9a17a073998e2","sha256":"abd36cbc6c25ed8f9a92571a56fb2e96a130fb68495664ab52288edc5ad883d6","sha512":"2acddd4e726fac6afc8c068ece4d37cf945417bf9f8f8ff721dccd3ff3effe6cd91ea2897e45fe08d37100995e641a48a8ba58e4e1e177bb07f86b1bdd5d2075","ssdeep":"","tlshash":"a9a0120040e1c15636f08220000331203304a0316b0e40c48c311c4d24d7423a508854","size":86,"data":"","first_seen":"2026-06-01T14:26:11.3695Z","last_seen":"2026-06-01T14:26:11.3695Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-assets-advertising~pages-assets-myAdvertisement~pages-assets-orderDatil~pages-assets-revise~pa~374d2ca3.d1586906.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e996d2d1710cef71c4e345d91a387895","sha1":"3c259539afd20e4ffba91e945dfc7c6bac2f736e","sha256":"7b7c49b6932ca54e41db87319822230929d20b62d5931d8333ac4063639944c2","sha512":"8046689cdb9beefa38945f6f5ec37af62029684a0c6f30004e1917d2d3434ae49b03f87e9c77b2bb27473012b1d382400fe2d3d97a98ff0766896ebdc7063c39","ssdeep":"192:iQ4UoRsbqoBXk63gKQpq5m1E1liYi3iA4Ijdux1X9QD:iDjV4n37g+liYi3Lj6t9s","tlshash":"cc32d70cf8c2b44104534561c2ef9919923eea9b65626dcd73e0e2db8f3578e1293b7b","size":11528,"data":"","first_seen":"2026-06-01T14:22:23.792449Z","last_seen":"2026-06-01T14:26:11.30925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-assets-myAdvertisement~pages-assets-orderDatil~pages-chat-chat~pages-chat-chats~pages-legal-le~6532092a.ea28fc50.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cbd2af346621e03090a496597fcf926","sha1":"5f86be7a888a4586e1b760b2dfa953a31d602abf","sha256":"9e91df33ee83ede4e464ebd3502cd168a1d749f9d18421fc6067e9733b3a6f1d","sha512":"c40138931cd900b8159187af2b8371ae3bf36a58c42394da272f1ca4c7f5443f1c2992921a80aa4d3dbd514612a2ef2f6e98595a8d6750394d16e7c5feb5a117","ssdeep":"768:F0ILs+CtiNvWO8cGSS3e9QCEh70ItR7l2Qq4lNgWdbsoQjfG230uILh0Czmc:FFLsHikSwgItR7lxlNVFsoS5k1mc","tlshash":"21138c779282bddf5f632482108617c21d2d6db782a4e4d5fbd904faa0f4c6daf38494","size":45270,"data":"","first_seen":"2026-06-01T14:22:23.841185Z","last_seen":"2026-06-01T14:26:11.360666Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T00:16:58.842641Z","times_seen":4010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/chunk-vendors.09b863dc.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bc893de6e477163a7d97f74ab8f1815","sha1":"cd6cd609f33ea214ba3bf1189ea65b4c608ce02b","sha256":"743549932bde92916f49560597b8e4608f94e153ae701726947ba83e9fb6f390","sha512":"bbc7e16972753657b1eeaca0f9f02f184e0b18bd6228aa81eb7e725d941de553085272a4d3991bebdd48faf5f6a35f41c29ac81649f5d9ab011bd70b228cbf82","ssdeep":"6144:9GzA0zCHgklzD1Er+blBiChctMUA9DGzCI55ofAWnMOF0sqyvmEy3ceS:czjPEzZtdAWC5OA4+3cx","tlshash":"ea05089cb281b0b607e761f5003f220bb13b6968b40a94d5f279e4d5ae78d4e6127f7c","size":841319,"data":"","first_seen":"2026-06-01T14:22:23.797401Z","last_seen":"2026-06-01T14:26:11.327114Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-home-home.a27db3de.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4ee3e15199eace2024f41676f321e57","sha1":"a0f01682ca6b18556e405f471dedb142ea8f0a22","sha256":"085f01a23f969b7eeeb977dcce63dbe0b44d11331eac333c28ba5c352993e2ca","sha512":"9da0ee33c3745e6739f4b1197ad3cf756a7cb1326625a3091ae7d46e8a2e0a5a9e13eb7fc715d532f75d9875b9f1e6f37012d761ab492c572cf5d602586c7944","ssdeep":"768:0h4OtaRpORBizrOPNDwc+WfWpJueGs1A/QWA86v064fWUevsU6:0mZOezrOV9+YMuWjv5Q/U6","tlshash":"bb53da14f14a70af4debd02164ab572990313f76e011d406ebb6d5a88dd9ecb2b23f6c","size":64722,"data":"","first_seen":"2026-06-01T14:22:23.799141Z","last_seen":"2026-06-01T14:26:11.36152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/#/","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5d853b58e7fd123fabe3d80e2af27e58","sha1":"4d51ea1d2638624d84c32efa09312caefd1d4ea1","sha256":"f78abfa0a6b23ab002d8bff9a6f6997ffc0cc8a968b54b76b5359921e4dc4f5f","sha512":"0ec4ad30adbc8dea485a123007575bf09d88668d8d363d2079aaedee0e55ca5940743d81ac9beb5278d3f73c670503ab491a6f5f07a21d5436641a71b6924a70","ssdeep":"","tlshash":"45a002494082b0010e30e3623f0b3331320cb220aa0fc0c2cc33064a22f3873fa000a1","size":62,"data":"","first_seen":"2026-06-01T14:26:11.371812Z","last_seen":"2026-06-01T14:26:11.371812Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-mine-capitalPwd~pages-mine-login~pages-mine-mailboxForgetPwd~pages-mine-modifyPwd~pages-mine-register.9f787d91.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"63840a3a5e1525c3a0e51819d84247d7","sha1":"af0481c58745f12a05b63793d300656c8cf4e73a","sha256":"98fd3850cce1e6c30e26d328c165c87cbb51c3d4629c42657759ade8f2492189","sha512":"4ca35e28a570a03c27071eecae3ba30dc3bfd6b42358a9d4287ff3963cf74311bbbc38e1e6a7261f08372b1d635da6a0544e8c217d2a2adfd87147da4ce0399e","ssdeep":"384:9MPNBCru9q637U0HnyAKq9PrC4YNONvxywpd31O5hfEpWuR1MOUuyV+ug:UBCK95zXKq9JYN8vxywpdgPcNyV+D","tlshash":"7a132924f0cbf85649d3482019af9219a1722e2e5852b4c2d7f1ebf9ce75ade0127f1d","size":43208,"data":"","first_seen":"2026-06-01T14:22:23.846202Z","last_seen":"2026-06-01T14:26:11.373033Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/index.c926574e.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6ac5ba0ae5a9af79d56c203c1b6b814","sha1":"bd18bf05957297d84410c610bb6fc478445e999e","sha256":"28ed53376f0debb72478f4c54b3a2663709be332ed603123b620d2bdb858b596","sha512":"c5d368421dbb2902a09154386a54ce4bcaf4d074a5761993b2fd1bfbcc3672cdd707ea842345698222e0cd390e76975448647d81c50120144e41a570628a6494","ssdeep":"6144:FJAAih8uk6s0GKFE0CaBfb2joKoGhjZaL3rVfwd2uC12Fxx1Rq:FGABjK20CxUL3gHw","tlshash":"efe43a5cb5cbd6b930d77025b45fa106a19dbd6a8c0e7058f7e8d510cf4b68ab232b32","size":672142,"data":"","first_seen":"2026-06-01T14:22:23.771982Z","last_seen":"2026-06-01T14:26:11.302208Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/#/","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"370888ed7ce0cc1977a60184ef29654e","sha1":"e473da31c3ad3d3fc5885b00f07e73373b2c6e73","sha256":"e677e2ae54ace6f75f9a85cff22ca5d21faa8041dac16febb2442664bec88b4a","sha512":"302d5bb32fad98afe07b0c0b500f16ae73781dd26515bf7b7bc1471513c10a9eb70427e352733fe28057bd98b7b5a8d1cc2c093e0a0c3d10453435c22c7040fc","ssdeep":"192:QnXtoEPzhNLKyCYaXO3cdqkUewfRvkVwyv:QXdk/","tlshash":"81d133885af310902cb3722a4b5f0208727df4571a6cdd897e6c9b609f5093977a1bf8","size":6604,"data":"","first_seen":"2026-03-02T14:06:32.082852Z","last_seen":"2026-06-01T14:26:11.373919Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T03:29:34.793603Z","times_seen":15895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"nivex.world/api/exchange/favor/find","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /api/exchange/favor/find HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-auth-token: \r\ncontent-type: application/x-www-form-urlencoded\r\nlang: zh_HK\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: text/json;charset=UTF-8\r\nx-auth-token: f2f7ab2c-6bf1-43fc-ba70-c084b0f6f5d9\r\ncache-control: no-cache, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83,"size_decoded":0,"mime_type":"text/json; charset=UTF-8","magic":"JSON text data","md5":"57226f67533eeb32a2970aad4ee686b9","sha1":"6da52ed488e8263d46046d948c65f92d99a61694","sha256":"f859cf7f3f2193f801a934a35889bcf010e00ab071e3ca1c4e245d767d5d9527","sha512":"39e10645ac340b25425a59874efba731902ecc7906665a9e5a83c13c35347126238ad9537c5d9f7e28c3440d6eafd497a0454da91ef5d8cc6f7fbb6447f4f7be","ssdeep":"","tlshash":"85a01100800c3820a20a8303228bb0283ceb2020230aee2e882e02300e8008a82b30b8","first_seen":"2024-08-20T10:56:20.497138Z","last_seen":"2026-06-01T14:26:11.297507Z","times_seen":6,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Cpu.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Cpu.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 555\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-22b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":555,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d81f9808b3d40bc9f19dbf9938718bd3","sha1":"b234eee59a7f8cdf577c0a527a6d264c6799608e","sha256":"a06862cc3794e7abc4465214e0b5fa42fb0bc9a57cdd690acde388fb410febd8","sha512":"78df76ed2721bd1d7f0d24c437b7fec1fd0540bdef12cf655437194fa7a328e455a4310dc23585cd335284f75a92f699fd6afc1a7739235b1e96369fbde34dda","ssdeep":"","tlshash":"c4f0af91460cba28a55343a48fccb938143262d2a61c82bcbc901338571566ffcbaff8","first_seen":"2026-06-01T14:22:23.832939Z","last_seen":"2026-06-01T14:26:11.299339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/index.c926574e.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:46.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/js/index.c926574e.js HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-a418e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":672142,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64856), with no line terminators","md5":"f6ac5ba0ae5a9af79d56c203c1b6b814","sha1":"bd18bf05957297d84410c610bb6fc478445e999e","sha256":"28ed53376f0debb72478f4c54b3a2663709be332ed603123b620d2bdb858b596","sha512":"c5d368421dbb2902a09154386a54ce4bcaf4d074a5761993b2fd1bfbcc3672cdd707ea842345698222e0cd390e76975448647d81c50120144e41a570628a6494","ssdeep":"6144:FJAAih8uk6s0GKFE0CaBfb2joKoGhjZaL3rVfwd2uC12Fxx1Rq:FGABjK20CxUL3gHw","tlshash":"efe43a5cb5cbd6b930d77025b45fa106a19dbd6a8c0e7058f7e8d510cf4b68ab232b32","first_seen":"2026-06-01T14:22:23.771982Z","last_seen":"2026-06-01T14:26:11.302208Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1021,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Eye.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Eye.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 331\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-14b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":331,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"016d8ded1276cbb1befb30d8077ea492","sha1":"21fdde557dd38b6eaaa1618d2739c074f51adaae","sha256":"78d7cf310cd31e2cbc24d9a640cf29537c9ebd6bec7262301aa7a14855d03429","sha512":"2ad534a8d1fda0aedc9abfc04864afe0bb0a6d983015dec2f65225002ddb474e8711e1353039457e9f09f129a61e1ca0c794eecb112fcb747e24cf397e91b69b","ssdeep":"","tlshash":"b4e02638828ccd2cb413c3a4c33a323a132ea181332d5a38d92f2634a107a4af527998","first_seen":"2026-06-01T14:22:23.744473Z","last_seen":"2026-06-01T14:26:11.30642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-assets-advertising~pages-assets-myAdvertisement~pages-assets-orderDatil~pages-assets-revise~pa~374d2ca3.d1586906.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/js/pages-assets-advertising~pages-assets-myAdvertisement~pages-assets-orderDatil~pages-assets-revise~pa~374d2ca3.d1586906.js HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-2ef6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12022,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11032), with no line terminators","md5":"e996d2d1710cef71c4e345d91a387895","sha1":"3c259539afd20e4ffba91e945dfc7c6bac2f736e","sha256":"7b7c49b6932ca54e41db87319822230929d20b62d5931d8333ac4063639944c2","sha512":"8046689cdb9beefa38945f6f5ec37af62029684a0c6f30004e1917d2d3434ae49b03f87e9c77b2bb27473012b1d382400fe2d3d97a98ff0766896ebdc7063c39","ssdeep":"192:iQ4UoRsbqoBXk63gKQpq5m1E1liYi3iA4Ijdux1X9QD:iDjV4n37g+liYi3Lj6t9s","tlshash":"cc32d70cf8c2b44104534561c2ef9919923eea9b65626dcd73e0e2db8f3578e1293b7b","first_seen":"2026-06-01T14:22:23.792449Z","last_seen":"2026-06-01T14:26:11.30925Z","times_seen":2,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/X.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/X.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 231\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-e7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":231,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"209fc75b78bb5e4849f28338c4beb583","sha1":"2025c4b3e2fe18c0d525a94b97504208b1cdaa33","sha256":"f3bc24503442adbf8cc60237248ee73e4c12db91a6e5adeacb93920f48bc990c","sha512":"b3fac55c3c0c03351069a92f097d4d769b29754fad5a383dfbb7528d2791c7a7caab945d3a9d5e8fc8fe6fcf3b9de9e609f4a3c5df8a9e71299ffa8e7a8bac3a","ssdeep":"","tlshash":"d2d0a75653181d2cb9138660d7783334017e2282130d512cec6115316604a4eb83bad8","first_seen":"2026-06-01T14:22:23.819375Z","last_seen":"2026-06-01T14:26:11.312084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/api/market/symbol-thumb","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"POST /api/market/symbol-thumb HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-auth-token: \r\ncontent-type: application/x-www-form-urlencoded\r\nlang: zh_HK\r\nContent-Length: 0\r\nOrigin: https://nivex.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: https://nivex.world\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncache-control: no-cache, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16184,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f3bec1d165de6b272ad1e46f16e005c6","sha1":"8fb09f32c78ff98f44576dac7e659088262d50a3","sha256":"819b0a3cda98cc9b17b1907b34f852d3a16ea79cac428d4460ef4815ab02986e","sha512":"c27844b0b5a6a5f2853bf61b234a0127944c9a35cdf26f837986b057fc84a55ae44200034c237ede4242a209a161138453f7772a52c21f9c79d2c4a14a4f76f2","ssdeep":"384:P47HnLWtV/bw/O/GvO/R/c/L/tw/C/J/u/8o/+Z/o:P4Dn6tV/bw/O/GvO/R/c/L/W/C/J/u/j","tlshash":"3b720f8867210ed5caa466801cbb3a5201ec73c7cdcdcd56d9ecde184bf66792b4bb12","first_seen":"2026-06-01T14:26:11.314243Z","last_seen":"2026-06-01T14:26:11.314243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/api/uc/check/login","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"POST /api/uc/check/login HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-auth-token: \r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://nivex.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: https://nivex.world\r\nvary: Accept-Encoding, Origin\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-application-context: uc:6001\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\nx-auth-token: de618085-c7a4-4d61-817a-8be6998fd272\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":106,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"32b592c09e26d1a61961b9de23f4a378","sha1":"be1174c7eb71e595ac8353b0a6dfe6925002af45","sha256":"6ce9268e516d14c1ecd11abff8aef921d8ecd8e8dddb374ea24057005a54260e","sha512":"b31bee48bd1f0a3fdb519507a0df8c3cfa7841c03213081465eeca5b6f2e9066b80b4945d7c566f8435821fb28cae9a7641d0b3ff9f25fc9ec368d5e4a5831c6","ssdeep":"","tlshash":"63b012312420575442cac0dc6808e541372f6fd3130e304b06874f04270cb3221b3384","first_seen":"2025-06-28T22:11:57.637385Z","last_seen":"2026-06-01T14:40:38.62761Z","times_seen":19,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: XkcluIlbDiynJ8/1U/OtaPKYUJGYhTHuQW+CEbV4QgNqxPhQKlsekH0sewXcbNrepMCr73LwmqOGdFxClVc7pB61kg9M9kkr\r\nx-amz-request-id: 5V885H93NBVY8H2X\r\nDate: Mon, 01 Jun 2026 14:25:50 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.035689Z","times_seen":494,"resource_available":false,"data":null}},"time_used":1439,"timings":{"blocked":573,"dns":22,"connect":264,"send":0,"wait":288,"receive":1,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/GoogleIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/GoogleIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 736\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-2e0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":736,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef3d0649cc89443feb92050a077da078","sha1":"e4273a0c57ccfdf503c61f9356d8abfed48030b9","sha256":"5d07ce51110964fab6360249af29294c41e617ef86a591939fc253e9cefce2ce","sha512":"17fd0fd5fc2c3474af24eb9b014781b6272e5ed5844fb74f33bc20390082856bce6a37dadfd8851d808ec0981217f05a729265f43563ce21839b38149082fdd9","ssdeep":"","tlshash":"200144d61c9e0010cea64344fd3d0c30513fb0da2e0d92dca4149633b159ef4c876e18","first_seen":"2026-06-01T14:22:23.842903Z","last_seen":"2026-06-01T14:26:11.318678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Facebook.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Facebook.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 264\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-108\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":264,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc69377c6a5901bef8cd8b0c73e5dc4b","sha1":"ea1b0872d23e376603daace4f3a2231c5601b57c","sha256":"73a5bf780c98f6601e7dd5f450408a648df1ec416f17fb1a0b42bbc1936a88b0","sha512":"d959545e16c29b6059567c7291e5c6bd7e5d6c5a93ed311f5c15e16c4338e93d85b92bcea893871907827db564bcec4fc9a6eb36e38eb8f32da3c8cedcedc4d2","ssdeep":"","tlshash":"ecd02e65534c4c2cf8238a10c7283234022ea381331ca16cd87e0174910564de83f5e8","first_seen":"2026-06-01T14:22:23.774275Z","last_seen":"2026-06-01T14:26:11.320252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongji.dcloud.io/uni/stat?usv=5.07\u0026conf=%7B%22ak%22%3A%22__UNI__F03A3E1%22%7D","fqdn":"tongji.dcloud.io","domain":"dcloud.io","tld":"io"},"ip":{"addr":"122.51.115.20","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongji.dcloud.io","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Mar 2026 00:00:00 GMT","end":"Wed, 30 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"53:9A:42:10:44:EF:01:06:7C:B7:76:E5:19:D4:9C:53:5C:F2:DC:5F","sha256":"37:03:EE:63:0E:9B:52:21:F1:AB:6B:0B:92:7C:9D:4A:17:8C:E5:3F:AE:68:0A:6D:44:64:F8:BC:5C:B3:AC:11"}}},"request":{"raw":"GET /uni/stat?usv=5.07\u0026conf=%7B%22ak%22%3A%22__UNI__F03A3E1%22%7D HTTP/1.1\r\nHost: tongji.dcloud.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nivex.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 01 Jun 2026 14:25:49 GMT\r\nContent-Type: application/json\r\nContent-Length: 20\r\nConnection: close\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"66aa51f1ef6ef8d7b7505d1bf3e866ea","sha1":"7db307c28260c88699d31afc9749ae5fa9cbf55c","sha256":"7d062e5ee6458e05712fbac24cde5e05b7bfb6307dce943029051b2712b92056","sha512":"07f474d854345c6be2a4b19fc95a1355ef68bfeeaae862a14304cdc1dccc9c93819d12060722c01e6088ad5efaf1dbe5434f0ddd92056396308e1736fa8170d3","ssdeep":"","tlshash":"ae700020082828222a008800002bc002a2020c082c0208228000882c00000000300800","first_seen":"2023-05-24T19:19:39Z","last_seen":"2026-06-01T14:26:11.321864Z","times_seen":92,"resource_available":false,"data":null}},"time_used":2597,"timings":{"blocked":1201,"dns":1,"connect":441,"send":0,"wait":190,"receive":0,"ssl":762},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/api/uc/check/login","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"POST /api/uc/check/login HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-auth-token: \r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://nivex.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: https://nivex.world\r\nvary: Accept-Encoding, Origin\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-application-context: uc:6001\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\nx-auth-token: b49f5c5a-b1e5-4bb5-b796-c2e53096c997\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":106,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"32b592c09e26d1a61961b9de23f4a378","sha1":"be1174c7eb71e595ac8353b0a6dfe6925002af45","sha256":"6ce9268e516d14c1ecd11abff8aef921d8ecd8e8dddb374ea24057005a54260e","sha512":"b31bee48bd1f0a3fdb519507a0df8c3cfa7841c03213081465eeca5b6f2e9066b80b4945d7c566f8435821fb28cae9a7641d0b3ff9f25fc9ec368d5e4a5831c6","ssdeep":"","tlshash":"63b012312420575442cac0dc6808e541372f6fd3130e304b06874f04270cb3221b3384","first_seen":"2025-06-28T22:11:57.637385Z","last_seen":"2026-06-01T14:40:38.62761Z","times_seen":19,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Menu.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Menu.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 246\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-f6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":246,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f298b277d9f06261fda54141e3ff583e","sha1":"8cb16ce28757621969d83fc654b3531a49a916c6","sha256":"9688004757e6fa8c4e3951497658e438dff31c115477757f77f5890a896bbdaf","sha512":"64f0c8508fe9f5cc144aeecc894da86a78819f99f004dc1745d5f1a58f61fa161d860bf0e63168e9bc1c6fba87d6598a8f22d2297a54baa30f8923fa083dd9a0","ssdeep":"","tlshash":"1ad05e4546182e1cfa164760db68323441ba118a1a0e516cec6162755304a5eb83bad8","first_seen":"2026-06-01T14:22:23.763187Z","last_seen":"2026-06-01T14:26:11.32274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/api/uc/announcement/page","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"POST /api/uc/announcement/page HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-auth-token: \r\ncontent-type: application/x-www-form-urlencoded\r\nlang: zh_HK\r\nContent-Length: 8\r\nOrigin: https://nivex.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":8,"data":"pageNo=1"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: https://nivex.world\r\nvary: Accept-Encoding, Origin\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-application-context: uc:6001\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":520,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3ab56b6c5416b15b227c4249054b045e","sha1":"f7885732c73e2ba4f3bd3ae44116b547caf3d154","sha256":"e387ea754ad3fc648e2589235a78c67a26209edaa4b56a446aad34405bf09a8a","sha512":"93632a5b18d81ab001be8f19540158fd3a2499b54948fc2cc8c76c1629d4a1b9459f77eaa0430c0ff90d0ad6f447871fb3461ad5678543009400a7302054f57c","ssdeep":"","tlshash":"92f02e67f8705e045ac9816924a852c26317af874f09391e3b8e4b0c0f4db2f55f7729","first_seen":"2026-06-01T14:22:23.785296Z","last_seen":"2026-06-01T14:26:11.324314Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bnb.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bnb.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qGiVOfzv9uhZNQLLPWyVl9DVPmoQiHfP1UuzUEf477AYEoXHLzGd92CTKuHikgS6TME0IJPy/iu/4iOTRrNVLCVom0T4EOi9\r\nx-amz-request-id: 5V857D83Z49G92RM\r\nDate: Mon, 01 Jun 2026 14:25:50 GMT\r\nLast-Modified: Mon, 10 Jan 2022 15:02:55 GMT\r\nETag: \"bed74791845ecaea0b78be9b10c690f6\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1015\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bed74791845ecaea0b78be9b10c690f6","sha1":"ca96e3d4056d851ed301eeb4a2adf8e0103b8c4a","sha256":"7a938ed34bf0bbd6dba92c49cc3911052777ac55306abee47300bc36b0e6aedc","sha512":"cefe77f1b27c043db212b67fd228a6a208b5e63f079ccfedec269fae9bfe964c9be8b423737c3e16d0f112237808a623d101f4bc9e6f5b039e13747251db50f0","ssdeep":"","tlshash":"20110ea4730cd2511e0cd35a7b29dcb97652b4e6d782910015c6250aafa4aff1c70fcb","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-06-01T14:38:08.594515Z","times_seen":247,"resource_available":false,"data":null}},"time_used":1520,"timings":{"blocked":616,"dns":18,"connect":256,"send":0,"wait":286,"receive":0,"ssl":341},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/chunk-vendors.09b863dc.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:46.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/js/chunk-vendors.09b863dc.js HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-cd667\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":841319,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35859)","md5":"3bc893de6e477163a7d97f74ab8f1815","sha1":"cd6cd609f33ea214ba3bf1189ea65b4c608ce02b","sha256":"743549932bde92916f49560597b8e4608f94e153ae701726947ba83e9fb6f390","sha512":"bbc7e16972753657b1eeaca0f9f02f184e0b18bd6228aa81eb7e725d941de553085272a4d3991bebdd48faf5f6a35f41c29ac81649f5d9ab011bd70b228cbf82","ssdeep":"6144:9GzA0zCHgklzD1Er+blBiChctMUA9DGzCI55ofAWnMOF0sqyvmEy3ceS:czjPEzZtdAWC5OA4+3cx","tlshash":"ea05089cb281b0b607e761f5003f220bb13b6968b40a94d5f279e4d5ae78d4e6127f7c","first_seen":"2026-06-01T14:22:23.797401Z","last_seen":"2026-06-01T14:26:11.327114Z","times_seen":2,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/api/uc/check/login","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"POST /api/uc/check/login HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-auth-token: \r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 0\r\nOrigin: https://nivex.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: https://nivex.world\r\nvary: Accept-Encoding, Origin\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-application-context: uc:6001\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\nx-auth-token: 55c1b034-0876-49fb-96aa-ef41fb4456ac\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":106,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"32b592c09e26d1a61961b9de23f4a378","sha1":"be1174c7eb71e595ac8353b0a6dfe6925002af45","sha256":"6ce9268e516d14c1ecd11abff8aef921d8ecd8e8dddb374ea24057005a54260e","sha512":"b31bee48bd1f0a3fdb519507a0df8c3cfa7841c03213081465eeca5b6f2e9066b80b4945d7c566f8435821fb28cae9a7641d0b3ff9f25fc9ec368d5e4a5831c6","ssdeep":"","tlshash":"63b012312420575442cac0dc6808e541372f6fd3130e304b06874f04270cb3221b3384","first_seen":"2025-06-28T22:11:57.637385Z","last_seen":"2026-06-01T14:40:38.62761Z","times_seen":19,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"www.nivex.world/api/market/market-ws/260/pxkg5ctn/websocket","fqdn":"www.nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /api/market/market-ws/260/pxkg5ctn/websocket HTTP/1.1\r\nHost: www.nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nivex.world\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: VKbroYyodbCQp68W9TgQfg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Mon, 01 Jun 2026 14:25:49 GMT\r\nConnection: upgrade\r\nAccess-Control-Allow-Origin: https://nivex.world\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: UURRmA6lAN83QtigljYf7BcEo0c=\r\nSec-WebSocket-Extensions: permessage-deflate\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T05:09:49.035637Z","times_seen":16204071,"resource_available":true,"data":null}},"time_used":1852,"timings":{"blocked":0,"dns":530,"connect":788,"send":0,"wait":261,"receive":0,"ssl":800},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"www.nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Headphones.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Headphones.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 322\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-142\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53fb15b8b9cfa01dbd2a6c01354ea482","sha1":"a2633f4dd25e1d1844b8a5fcadc73a4f1df77f17","sha256":"28ef4da821dc99b777e4181463e72fd74380238d9cbf16041698f06cc3348efc","sha512":"1069ac056d8c414d572fff9e20756de9501eef30aa4c73659a0bd1309dff681676c8f6b4966999e1779c067caa648bd41f9276fc5002894fcf7a10f7d2dfcd67","ssdeep":"","tlshash":"d2e08c35cf4c5e1ce8578650df3cf238032ea366364c5168d86e10345607649f43b9a8","first_seen":"2026-06-01T14:22:23.808076Z","last_seen":"2026-06-01T14:26:11.329385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Plus.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Plus.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 227\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-e3\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"19953d048852a1a0070f41ed1b511cc5","sha1":"c2c5f7f0343380fab7cff9f974b41b35748ef457","sha256":"d485e5238f405ed0e18ed8bc9cde46017b3cd83b734147bd2a587adf5dd79df2","sha512":"84bf6dd0053f8f9570085c814d1a15761fab1c11a2741b093e35ae6f0c6df413e2594961d3c314b8b1ac4f2e7c0600e7f04c1097ea6f252f94ccca6aa493e250","ssdeep":"","tlshash":"88d0a74543085d1cf9264661d7683335013a2282164d516ce8611131530494eb83bae8","first_seen":"2026-06-01T14:22:23.839334Z","last_seen":"2026-06-01T14:26:11.330776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Zap.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Zap.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 354\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-162\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":354,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34f66a582a8900062c5dd5949cca0600","sha1":"48b47d30c2ad47cc6eb0a7029ef105a60b121587","sha256":"32c2e939fb5e2db97cf1043ddea053e21ffb1148135bca85ccfe0e89b62bd951","sha512":"67fbd67142ca2c672eaa9b67cc7e38964cb2abfd0a51c645aa6c31216f645255332083dbfb5b7d5b29fe46fb789578a1f0c442b3e99279c6bec2bdb61aa4ed04","ssdeep":"","tlshash":"44e0263a431c5aecba13c760eb3bb378031ea15537be816c986e0171910e44ae47ba9c","first_seen":"2025-10-13T14:46:35.126207Z","last_seen":"2026-06-01T14:26:11.332209Z","times_seen":7,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/GiftIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/GiftIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 453\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-1c5\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":453,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de14aa4f3048cf0583718d2db46ba089","sha1":"5b60169ef2eb6cda82c17de1312c2d1ad36703e1","sha256":"2c8ebf77c1a58914b15d7cd35bda0900006f096217eff0c93a916d3f8732dc1f","sha512":"7997c7f3aec07c85f34a847df1eef1451ca34524323fbc58efc6a5bbc286d0f6f8372853bcce03b601ed2fdfd6333ad09371c5c2fb92eb468bb52ba267e7b9dd","ssdeep":"","tlshash":"49f0274baecd181df02687d9b6783228116bd2d65a4c0448e9a941335315699ec2b168","first_seen":"2026-06-01T14:22:23.809551Z","last_seen":"2026-06-01T14:26:11.333008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Megaphone.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Megaphone.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 398\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-18e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":398,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"278c39b38ed9e7ec3b79dbffd6d1ac27","sha1":"139a3221e028795720af7473ba0a1b0ece7fac35","sha256":"ef96fc86083079a81870ba392805044ded6ad155aafc9381b4c3b4d38715f237","sha512":"a3f20ca99eb00941bd0ca1381b9aae0a519146c1adf9354ec8c669b7a81f48cf51e3e5b4a76037a6349aeeba056ceabcc88bc4b90557cf7bffa9cb16bc2bafe7","ssdeep":"","tlshash":"d2e06864da0c291cac53ca918f7e7234132d32b2322c42ac9d2c11b0110aa1de8bb6d8","first_seen":"2026-06-01T14:22:23.813889Z","last_seen":"2026-06-01T14:26:11.334283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-mine-login.11d40f79.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/js/pages-mine-login.11d40f79.js HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-ed6b\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60779,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49081), with NEL line terminators","md5":"aba2423dd1c53a3e16b53704da8d7b6e","sha1":"6a9f2a1eee5cf0e8eebe72cc340c9c75ab320110","sha256":"e75b3bea8019b6bf05c630fa71de8a03ffb12d71776498939d4e2b7f516fb48b","sha512":"e0eb98c028f2db3d7ce8c5f61fdcad778a1ced9345747f45ac1790dc120ae3b8cd4e2707095e508780d7d50a3603398591047216adb111bc2ca5d18f7fab3919","ssdeep":"768:mwbz6WMj3qioZ1ObbYl3DZvlviBgsLOh5y/JC8soLD:Dv6fqioZsPYlTZB+gN5eg8fLD","tlshash":"2453c545b086fa4f8cbbd14c602e541210693eb6e0d9461aefe5f3e4a9f55cf226273c","first_seen":"2026-06-01T14:22:23.79475Z","last_seen":"2026-06-01T14:26:11.335523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Globe.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Globe.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 298\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-12a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8447677b6b574c00b2e04ca697085fa","sha1":"f076f277579c19ef6a416358f72e8b5c01663b0c","sha256":"942d2989ccffeaa11b281021355632253a68d0aeec4686ad192b845af2ae8192","sha512":"1d38bfc250ebe8e0204f3215cfe2af2ff168e37439b41891a44c9b6295f6fd21547aa87a07069e0ea6aef7156e50c6dab1901665c89fe307c20fb9fa40f519ab","ssdeep":"","tlshash":"25e0860ac24c7f1cb952465497697334122e2251370d515cac691575f30568ef8abae8","first_seen":"2026-06-01T14:22:23.82729Z","last_seen":"2026-06-01T14:26:11.336848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/api/uc/start/captcha","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"POST /api/uc/start/captcha HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-auth-token: \r\ncontent-type: application/x-www-form-urlencoded\r\nlang: zh_HK\r\nContent-Length: 0\r\nOrigin: https://nivex.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 100\r\naccess-control-allow-origin: https://nivex.world\r\nvary: Origin\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-application-context: uc:6001\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\nx-auth-token: 2e1ecf02-e282-477d-b55b-17b48b05045c\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":100,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"3d5b96355591d92ecd9b7e9f44a3a40c","sha1":"4429457d3265ae4aa198009c0194dfe8bc595af7","sha256":"8046009f39e8714a511b49bb0cc63bfe3a61ac623db7e7c72d0ff4ed3b525e9e","sha512":"fbcedf9383e57f160e94282dd055b473240b577042f088e2f73899fb5d65103138cd9e5418225198ceb7ec217dd2574db96b39630f3d9d42c963fcba375c7963","ssdeep":"","tlshash":"adb0120682302f47e7053302182c0d2236e2fa500b9130a4d354a0b45e00d2020a7dca","first_seen":"2026-06-01T14:26:11.338058Z","last_seen":"2026-06-01T14:26:11.338058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/api/uc/ancillary/system/advertise","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"POST /api/uc/ancillary/system/advertise HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-auth-token: \r\ncontent-type: application/x-www-form-urlencoded\r\nlang: zh_HK\r\nContent-Length: 33\r\nOrigin: https://nivex.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":33,"data":"sysAdvertiseLocation=0\u0026lang=zh_HK"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: https://nivex.world\r\nvary: Accept-Encoding, Origin\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-application-context: uc:6001\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache, no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":104,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9690c50719aa9a3d61dd8640b4c23f2d","sha1":"3ecb6f99403793ee4bc14ed80144407e0958e500","sha256":"72b3ddb2e7de30abb0092a4af49af640c574fdea953baec47c97875af0f2b39a","sha512":"444dfdc649aae780a31908afb63ace2e752215ae1b9babfe5f508a7a9f6612e8eab50a0947ca0e6660e41e65f7c3fa3947ca07bb2a2ee3aaac500ea5254fe78b","ssdeep":"","tlshash":"12b012302420574042c9c0dc6404e540372f6fe31319304b069f5f04171cb321273304","first_seen":"2026-04-22T17:45:40.368846Z","last_seen":"2026-06-01T14:26:11.339948Z","times_seen":4,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/SearchIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/SearchIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 266\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-10a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":266,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"277f58b9b334975a0e215ccf8bda286f","sha1":"0b27b83775c7c6b224b6dcb0056958197bf0a0d5","sha256":"0a6fd921e7e08f5ffa8a61410830365d003a66448817c06f34a2676a1c5e202f","sha512":"a75f8267f1604eef3887fe3e44590391a343e9327483808b9b001b125c78d10af04abcb45a205f5a268d9d7a1e3c242be04b1799576582adf3fae59554bdc804","ssdeep":"","tlshash":"35d02b1d768c4c1db5324414fa1b3334212b82c7144c4268f4551836e1405cab13b1b4","first_seen":"2026-06-01T14:22:23.800569Z","last_seen":"2026-06-01T14:26:11.340665Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/EmptyIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/EmptyIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 493\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-1ed\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e33a0eb817f2fccf88e1e2ee1f770ba","sha1":"91bd9b46da785ffb8083c10b0f9fa1504dbf8edf","sha256":"b5d645fed0c50a6b69eccfabbcc8b8313135b78a3708aaf08fc778b4325fc289","sha512":"6a84ae17bbe8194989f92cbe8fb412a627c11af4bc258e3f5634418b44b5aad088667c1d63a5191054e004317c7d745f1826e7573b48eb8a3666cbbea996f75a","ssdeep":"","tlshash":"39f02e45cbcc7b2d443a4354ab7df335032ba3e5b20c4d4dbc5d06a1a424099ddb75c8","first_seen":"2026-06-01T14:22:23.752972Z","last_seen":"2026-06-01T14:26:11.342058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-financial-detail~pages-home-home~pages-market-market~pages-mine-capitalPwd~pages-mine-login~pa~fb9f62b2.57399966.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/js/pages-financial-detail~pages-home-home~pages-market-market~pages-mine-capitalPwd~pages-mine-login~pa~fb9f62b2.57399966.js HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-b14d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45389,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41869), with no line terminators","md5":"9fb88e43f3997b33ce0b857830ae690c","sha1":"3f907a33ad0766ae4fe2998b91efe633b13e0531","sha256":"752d5a7e43615f023cf99e73c68c9f3987f06aa0fab584303df0c389592e2227","sha512":"ab2d451a37b63ec9d15247bda9ba8a3e5e531f45b9a5b136d530347769054fbf3cc26f1fcdbcfff6890deb6dbe2b29179beed81b3b04afdc99bb101a36e3a60e","ssdeep":"384:jxMFP1D6Sx3Fm+jcbUyHToK8rbUXpMkfB+kBnAx28tStrB:tMFdDZFLcY8oQMkokBnAA8tGrB","tlshash":"4813c91cf1ca7c731e974480848b9206a36f6d6a6ca16c82b3e5d7decb79a4d012ff15","first_seen":"2026-06-01T14:22:23.825309Z","last_seen":"2026-06-01T14:26:11.343234Z","times_seen":2,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-home-home~pages-market-market.67aedcdb.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/js/pages-home-home~pages-market-market.67aedcdb.js HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-70ae\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28846,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26870), with no line terminators","md5":"26e4919f2f86c489ac7cef2b87a00229","sha1":"f6447782c1d063a67a32eaebf82b4203a7418542","sha256":"8a83d4dc93c17e5dc45dfa126ed0d71d99177a1df0e9dfb1c4176678812faf9c","sha512":"e4adaeec1f1fcb6ccc64753f2672bfdd9c34091409d497b6caa12f8364ea224de32406cb38ef0ac35e75baeef019cb3ad57941a52773617dbd8a1ada64ffd0b4","ssdeep":"384:byHr/rSVbnxEyuYAU+oz8QMW5ye9z1geoKiQGaAHdeU0/tdTTnOEP:byr/6Xu1Y8Iye9RgeoGGHdYHnB","tlshash":"dfd20909b087b40d48f3d55a787b562c70f13e6990095066eaf2c99e8dbddeb2523f88","first_seen":"2026-06-01T14:22:23.757002Z","last_seen":"2026-06-01T14:26:11.344974Z","times_seen":2,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/EmptyIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/EmptyIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 493\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-1ed\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":493,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e33a0eb817f2fccf88e1e2ee1f770ba","sha1":"91bd9b46da785ffb8083c10b0f9fa1504dbf8edf","sha256":"b5d645fed0c50a6b69eccfabbcc8b8313135b78a3708aaf08fc778b4325fc289","sha512":"6a84ae17bbe8194989f92cbe8fb412a627c11af4bc258e3f5634418b44b5aad088667c1d63a5191054e004317c7d745f1826e7573b48eb8a3666cbbea996f75a","ssdeep":"","tlshash":"39f02e45cbcc7b2d443a4354ab7df335032ba3e5b20c4d4dbc5d06a1a424099ddb75c8","first_seen":"2026-06-01T14:22:23.752972Z","last_seen":"2026-06-01T14:26:11.342058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Download.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Download.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 285\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-11d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12c30522b6663bfcd61a1210a48bd27e","sha1":"17eff19a717486d9ea1a1ff85b36a24b6e6e9f44","sha256":"bd63f716e42fa29dcd1475395258a4b9b806280839abaecb26ffe03d3e483164","sha512":"3c0cd7c45111bda1c2a4b4b1a6e6764479c2e0fa36bd554fc008c186072aab4c6e1ccadb3a7c32bcf3f7dd85fd57bafa46832ad80ac7f8f5139f72593b8a7af6","ssdeep":"","tlshash":"3ed0c215978c1d1ce8174660eb7c7274013e62a1120d411ca86a06305215a1ef87bad8","first_seen":"2026-06-01T14:22:23.81742Z","last_seen":"2026-06-01T14:26:11.346031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-01T14:25:45.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 782\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-30e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}],"data":{"size":782,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (503)","md5":"a45ae9f94e091527ead926f351237cdb","sha1":"0120dfd5a61687a9c6609f382d5ecce4af94b858","sha256":"e5ec401432a3e3f391e70fe3cd4669b38ab67867ca0a9c1a798cd4672ea3fee5","sha512":"de4e9ffb3173afdddeaae696a803957f44ec0e5dad826c8adaf2c6b5858a8f8e558321c9aa867bbbc84a7f1181ba8d0ff4f6c4606a44e8df858ce32af0bac360","ssdeep":"","tlshash":"3e01b1c31c51e8490720865575bad51e89664df6ad91d9503ddc2aed8be0b8ece2f810","first_seen":"2026-06-01T14:22:23.820821Z","last_seen":"2026-06-01T14:26:11.348081Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1292,"timings":{"blocked":518,"dns":1,"connect":255,"send":0,"wait":254,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/api/uc/finance/coinsNew","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"POST /api/uc/finance/coinsNew HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-auth-token: \r\nlang: zh_HK\r\nContent-Type: application/json\r\nContent-Length: 2\r\nOrigin: https://nivex.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: text/json;charset=UTF-8\r\naccess-control-allow-origin: https://nivex.world\r\nvary: Origin\r\naccess-control-expose-headers: x-auth-token\r\naccess-control-allow-credentials: true\r\nx-application-context: uc:6001\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nexpires: 0\r\nx-frame-options: DENY\r\nx-auth-token: 4d0a0b92-c1b0-4a22-bd1f-8c9c545bec01\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Spring","description":"","website":"https://spring.io/","common_platform_enumeration":"","icon":"Spring.png","categories":["Web frameworks"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":83,"size_decoded":0,"mime_type":"text/json; charset=UTF-8","magic":"JSON text data","md5":"57226f67533eeb32a2970aad4ee686b9","sha1":"6da52ed488e8263d46046d948c65f92d99a61694","sha256":"f859cf7f3f2193f801a934a35889bcf010e00ab071e3ca1c4e245d767d5d9527","sha512":"39e10645ac340b25425a59874efba731902ecc7906665a9e5a83c13c35347126238ad9537c5d9f7e28c3440d6eafd497a0454da91ef5d8cc6f7fbb6447f4f7be","ssdeep":"","tlshash":"85a01100800c3820a20a8303228bb0283ceb2020230aee2e882e02300e8008a82b30b8","first_seen":"2024-08-20T10:56:20.497138Z","last_seen":"2026-06-01T14:26:11.297507Z","times_seen":6,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Headphones.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Headphones.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 322\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-142\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":322,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53fb15b8b9cfa01dbd2a6c01354ea482","sha1":"a2633f4dd25e1d1844b8a5fcadc73a4f1df77f17","sha256":"28ef4da821dc99b777e4181463e72fd74380238d9cbf16041698f06cc3348efc","sha512":"1069ac056d8c414d572fff9e20756de9501eef30aa4c73659a0bd1309dff681676c8f6b4966999e1779c067caa648bd41f9276fc5002894fcf7a10f7d2dfcd67","ssdeep":"","tlshash":"d2e08c35cf4c5e1ce8578650df3cf238032ea366364c5168d86e10345607649f43b9a8","first_seen":"2026-06-01T14:22:23.808076Z","last_seen":"2026-06-01T14:26:11.329385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/FinancialIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/FinancialIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 188\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-bc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":188,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6febf7166fa5045aba11db09be3d7a22","sha1":"a5d500bb8a69ff75215f00c8f0fab760018a9686","sha256":"1ad1179b802b179f067bb629d888769382b693cedfcc19ab3c032956e0bbb60f","sha512":"1f5dc15540684c91302d2a165e4f8104e116014544fe9b24dfe0e2cb04eab33274ab5468e37f2adfd71b9ab16e8596ef6a29c037812a0673ec36a4ad4fbb9dd1","ssdeep":"","tlshash":"a8c0c00887140b2d37231541c33c73e0207818c2170c10558f3c2238f517608ed37de4","first_seen":"2026-06-01T14:22:23.767994Z","last_seen":"2026-06-01T14:26:11.349042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-mine-capitalPwd~pages-mine-login~pages-mine-mailboxForgetPwd~pages-mine-modifyPwd~pages-mine-register.9f787d91.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/js/pages-mine-capitalPwd~pages-mine-login~pages-mine-mailboxForgetPwd~pages-mine-modifyPwd~pages-mine-register.9f787d91.js HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-a8c8\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43208,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33066), with NEL line terminators","md5":"065b387687645decd2776c7970c79c8e","sha1":"c5acc7ab302dbabe20025c3c13657e529d1ccf69","sha256":"f847a6ee31a33086e0f3db470162968b2cfa285cece883adf8994b0dbb7d914b","sha512":"b696584db028d2c419076537adc82e724714f83c0de8afc4a4fa7d9b6f8f9fbcc45d52554d1d39d9163168539ec09bc3e41da8cbf55fd6bead3172f3548b0c2c","ssdeep":"384:9MPNBCru9q637U0HnyAKq9PrC4YNONvxywpd31O5hfEpWnR1MOUuyVW81OoIhLg:UBCK95zXKq9JYN8vxywpdgPHNyVW8soH","tlshash":"e8133928f1cbfa5649d34860199f5209a0722e6e4856b0c2d7f1ebf8ce75ade0127f1d","first_seen":"2026-06-01T14:22:23.823026Z","last_seen":"2026-06-01T14:26:11.350006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/favicon.ico","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:50.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:50 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 172448\r\nlast-modified: Mon, 25 May 2026 09:28:38 GMT\r\netag: \"6a141646-2a1a0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172448,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 9 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"4a2b0be8e03e7cd29a9613defaea4602","sha1":"50180489ac4b55d2b8df4ed3c0fe1c9a63fa9f33","sha256":"0b27a12eeed4dbbaf2bc0877763c921dd83d51c7bdaa2390f671f412984692e5","sha512":"7cd55a499cea59043260e462dcc4a9ec96eb8dc3ad3c7a4f5f0e61601ebb38e0299f0190497cf75fc6ba09845440f251e3e51722999d295a2cd2fb354f3dd0cb","ssdeep":"768:04UjtLh9NGYUjXOrvvBBBBBBBBBYZcZJ/s1xxGvLIF5tue8CxkekXyd:EjJLNGYUjXOrvtKHGDTikid","tlshash":"22f31d823f59e31dcede17312b499970aeb4ba476179a21c4eb3685e264bcbd0dd7003","first_seen":"2026-06-01T14:22:23.828789Z","last_seen":"2026-06-01T14:26:11.35187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":514,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/index.cc298949.css","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:46.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/index.cc298949.css HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-17998\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96664,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b23ffbdf507ee417fc3c7b7b242737a7","sha1":"eba2371178176221506aff0dc474570e47562e55","sha256":"97fafefc6bb45ed52a6930fd2fa079e13da77929f11bc7b813d5f09c85ff0f36","sha512":"c5bcad9b474333689093a848601b2871dcd50e04fbd2592ebee0053bed1c540a95f371e84db5bd34f641345bff4cfdf3938a9266b3280243f95fa7cafd6e4519","ssdeep":"1536:qlIApuK7hmVmU2RS1Wu3xdynGJ7eh/nQhlvbc:hApuK7hmV+S1Wu3iG41nQPI","tlshash":"b993f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2026-03-22T00:30:56.219993Z","last_seen":"2026-06-06T14:54:49.333049Z","times_seen":279,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/tabBar/assets1.png","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/tabBar/assets1.png HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 401\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-191\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"0c7b41dc70d818f0b400bc2a11add2cb","sha1":"9bf7ebbf47430ac38c91c0be1206f949f5085321","sha256":"9d7e0f4005d80bac909519f00a1c9882404739babc20a5e9905f8f4c9031210e","sha512":"7bfbb576d50e82a1fddb690cfe8b43006c1a1e78d73b55c0f83b14573a39358100369254e4df831f9736a365acb831678fa71f55122bd335f07057aa7d42d953","ssdeep":"","tlshash":"60e0f143f2054eb6d24aad1ab4323481d29e10b68398280d570dc85a9637f103ff5a88","first_seen":"2026-06-01T14:22:23.837385Z","last_seen":"2026-06-01T14:26:11.354101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/tabBar/user1.png","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/tabBar/user1.png HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 534\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-216\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":534,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"404d8e16283eee0acdf13dfcf4c47f4d","sha1":"a21d42f96b482a929ebdcf1bb60eb518b9e81760","sha256":"3a88303ec535ad845e055a16fbf8452ede319b618b57f94999475ea4a586a465","sha512":"bce86bef5537bcf8add598d470f58290e663163d0f8bad8bb8492422f5e8ad1bd154a7130b28a10095ea2bfec53023623d01ecec340b1410bde816f950f5133a","ssdeep":"","tlshash":"cef0205350492b34b7027ffaa1bb433becda131230b1194b4990ddd8b137e944448889","first_seen":"2026-06-01T14:22:23.77733Z","last_seen":"2026-06-01T14:26:11.355177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/TrendingUp.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/TrendingUp.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 242\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-f2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"80b1c9d3926bdb8a3300a74d47264cb5","sha1":"3c15d577c30cad89261a329f7c95aebbe4ee9f5e","sha256":"0839fdcc393e0e29109b72516a8c338c17a124e49ff3cc120a8ed5692dd6b8af","sha512":"174aca3e23f001eeb4f8d9db448b00fa4d8ba75049b8c2114a65a5f0a16153202f5ebee675e0a693803fccc229ce99897d9e255ce245152d5e0e3890f5638971","ssdeep":"","tlshash":"0ad05e1993484d2cbd268662d76c3275117a3281225d916ce8611135660595fb83badc","first_seen":"2026-06-01T14:22:23.815272Z","last_seen":"2026-06-01T14:26:11.356141Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/EmptyIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/EmptyIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 493\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-1ed\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e33a0eb817f2fccf88e1e2ee1f770ba","sha1":"91bd9b46da785ffb8083c10b0f9fa1504dbf8edf","sha256":"b5d645fed0c50a6b69eccfabbcc8b8313135b78a3708aaf08fc778b4325fc289","sha512":"6a84ae17bbe8194989f92cbe8fb412a627c11af4bc258e3f5634418b44b5aad088667c1d63a5191054e004317c7d745f1826e7573b48eb8a3666cbbea996f75a","ssdeep":"","tlshash":"39f02e45cbcc7b2d443a4354ab7df335032ba3e5b20c4d4dbc5d06a1a424099ddb75c8","first_seen":"2026-06-01T14:22:23.752972Z","last_seen":"2026-06-01T14:26:11.342058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/ChevronRightIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/ChevronRightIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 217\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-d9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a945f12f646a805b3ee6283ce063b4c","sha1":"451369bf519cf1c17bbca70a9bc9269967c6d7a7","sha256":"8f035bd05a3915ab1c599089eda70e89160fbf9d564b6bef893fbbc1b025f42e","sha512":"5e9f5349754781f840ea1910bbfd93a7fdbf593adf905897f0164c23e69e5bff002abf30a04873e462d6439814082ce8b93120502b769245d336825b5eb6d088","ssdeep":"","tlshash":"f5d0234943850c1cf47345d5f774333c157691d3144c591dd9b11171910054dae3f1b9","first_seen":"2026-06-01T14:22:23.803601Z","last_seen":"2026-06-01T14:26:11.357374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.157.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: ui1idrPAECFGOFiMR8frN/Y03Fk25gcsdSQjlPV3SR2wWH3hNmCBonBf+A3YE40nbO3OHxmjfFh0ah/l/QfCwKGFtSPmFr1I\r\nx-amz-request-id: 5V8CHA9YN07ZSHW3\r\nDate: Mon, 01 Jun 2026 14:25:50 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.034886Z","times_seen":471,"resource_available":false,"data":null}},"time_used":1506,"timings":{"blocked":612,"dns":24,"connect":253,"send":0,"wait":279,"receive":0,"ssl":335},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/tabBar/home2.png","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/tabBar/home2.png HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 513\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-201\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"95678251b0a09e42e214665be919e3ec","sha1":"9beffc971f763acaa3e342e6d373b55d5c96f55a","sha256":"83ce9b01e186d655ffffb785008f990cc0036a665a33f245296ba6d37197b64c","sha512":"4fef16ab245a4ff932320405a1daef98847c0faa2889543380219ca235fd4d7c718ad8fe6ccddcb3913f02f049c5d083e94c031a073f93aeb24e25d84f319b4a","ssdeep":"","tlshash":"8bf0751329248d78f14eab53ef850e2165420f729800cf49176dc8704e033d051c1542","first_seen":"2026-06-01T14:22:23.75941Z","last_seen":"2026-06-01T14:26:11.358852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/tabBar/market1.png","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/tabBar/market1.png HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 225\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-e1\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"bc941b9a586917a882af9d119ed84a6d","sha1":"4f79e8f26a8b3eae3d9f6ce61d5a38da38e19485","sha256":"ea1c5c0bf226f1b2c8a8c121c1ad4cd30f301e4b51baf1ccb6adc6dab7be0d4d","sha512":"6269121c3c691dfebfde7d23ca6750aa6ac2fd8bea06dd732f07b8457f21300c2e63766c60093dc173056c06066e7f7853a75beddf08068096dee041ffe2884f","ssdeep":"","tlshash":"44d0a7e376a89c39e96b5a2716061361ef71527424a34549012dd6191d6a25d00d9285","first_seen":"2026-06-01T14:22:23.810796Z","last_seen":"2026-06-01T14:26:11.359725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/ChevronRightIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/ChevronRightIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 217\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-d9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a945f12f646a805b3ee6283ce063b4c","sha1":"451369bf519cf1c17bbca70a9bc9269967c6d7a7","sha256":"8f035bd05a3915ab1c599089eda70e89160fbf9d564b6bef893fbbc1b025f42e","sha512":"5e9f5349754781f840ea1910bbfd93a7fdbf593adf905897f0164c23e69e5bff002abf30a04873e462d6439814082ce8b93120502b769245d336825b5eb6d088","ssdeep":"","tlshash":"f5d0234943850c1cf47345d5f774333c157691d3144c591dd9b11171910054dae3f1b9","first_seen":"2026-06-01T14:22:23.803601Z","last_seen":"2026-06-01T14:26:11.357374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-assets-myAdvertisement~pages-assets-orderDatil~pages-chat-chat~pages-chat-chats~pages-legal-le~6532092a.ea28fc50.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/js/pages-assets-myAdvertisement~pages-assets-orderDatil~pages-chat-chat~pages-chat-chats~pages-legal-le~6532092a.ea28fc50.js HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-b0d6\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45270,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44588), with no line terminators","md5":"4cbd2af346621e03090a496597fcf926","sha1":"5f86be7a888a4586e1b760b2dfa953a31d602abf","sha256":"9e91df33ee83ede4e464ebd3502cd168a1d749f9d18421fc6067e9733b3a6f1d","sha512":"c40138931cd900b8159187af2b8371ae3bf36a58c42394da272f1ca4c7f5443f1c2992921a80aa4d3dbd514612a2ef2f6e98595a8d6750394d16e7c5feb5a117","ssdeep":"768:F0ILs+CtiNvWO8cGSS3e9QCEh70ItR7l2Qq4lNgWdbsoQjfG230uILh0Czmc:FFLsHikSwgItR7lxlNVFsoS5k1mc","tlshash":"21138c779282bddf5f632482108617c21d2d6db782a4e4d5fbd904faa0f4c6daf38494","first_seen":"2026-06-01T14:22:23.841185Z","last_seen":"2026-06-01T14:26:11.360666Z","times_seen":2,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/js/pages-home-home.a27db3de.js","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/js/pages-home-home.a27db3de.js HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-fec0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62244), with no line terminators","md5":"e4ee3e15199eace2024f41676f321e57","sha1":"a0f01682ca6b18556e405f471dedb142ea8f0a22","sha256":"085f01a23f969b7eeeb977dcce63dbe0b44d11331eac333c28ba5c352993e2ca","sha512":"9da0ee33c3745e6739f4b1197ad3cf756a7cb1326625a3091ae7d46e8a2e0a5a9e13eb7fc715d532f75d9875b9f1e6f37012d761ab492c572cf5d602586c7944","ssdeep":"768:0h4OtaRpORBizrOPNDwc+WfWpJueGs1A/QWA86v064fWUevsU6:0mZOezrOV9+YMuWjv5Q/U6","tlshash":"bb53da14f14a70af4debd02164ab572990313f76e011d406ebb6d5a88dd9ecb2b23f6c","first_seen":"2026-06-01T14:22:23.799141Z","last_seen":"2026-06-01T14:26:11.36152Z","times_seen":2,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/img/logo.png","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/img/logo.png HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:49 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a1958b8-112d7\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"c0183a2acefa5bf5504dc0f21ad98f16","sha1":"0d9052412e1c327864be01d4683ded5919eb2a5b","sha256":"d6a8e281acc7ca0722ad63b1d9c9a1d4b6eff50944edd9157c88a973bb86a96d","sha512":"2b8e3cf7cb35271f65ceed5ad12830334e1ff235464ed85e6965e7e2715a2fd532f9ee405d2887c9d5d37ce77bb66704bbef35c270c96708fa4defa69c649f31","ssdeep":"1536:sc0CI6gyMA8SjLlQBwYUzog5B//bGV91LGLzQSY2G:s5CbgyMA8Ueokg5B/zG1SzG","tlshash":"8763cf771c120cc1f565a038dda49af1732195e943e50ab8d3b8cf6eca67038af47e95","first_seen":"2026-06-01T14:22:23.804863Z","last_seen":"2026-06-01T14:26:11.362401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.221.80.91","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:49.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 01 Jun 2026 15:25:50 GMT\r\ncache-control: max-age=3600\r\nset-cookie: __uni__uid=rBEQVWodlm5Se+wMA11wAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-06-07T03:29:34.786016Z","times_seen":16198,"resource_available":false,"data":null}},"time_used":1322,"timings":{"blocked":529,"dns":1,"connect":218,"send":0,"wait":218,"receive":1,"ssl":351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/tabBar/trade1.png","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/tabBar/trade1.png HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nivex.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 412\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-19c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":412,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"f554bf456f5cb0ec2ba7a5a3f2bee4ec","sha1":"7efe5d9fd7e6d2c06920c640fed95482c3e8f2dc","sha256":"c18bea37fe4c90979e144440438a579b037610b4918924e7a1a9e0ec5b9d740d","sha512":"b7b8fd96ee0d9c7d9ed5b2bee04392ba49d5e454448c503d24865b89770bc12fbebdcb81d21c4a573dea6ed4c0be21000854c9f7d90d4cc9dd290727d82f21ee","ssdeep":"","tlshash":"ffe0f1e76fb091bfeccd205216a200a12b2440fddc881308b448c8301d366c457beec5","first_seen":"2026-06-01T14:22:23.835559Z","last_seen":"2026-06-01T14:26:11.363935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/Users.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/Users.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 346\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-15a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":346,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db01430016d55e490f69b5ad88980c4c","sha1":"c2040d8e21a6b0fa8ee9855961bf052bbd5964cf","sha256":"e78a5388688620a3399163c1ecc50a1f02d39876f28fbe5dae5efae4e34e9594","sha512":"9960a2e5e8f7a3f12530e35adf1e11e2426b079d616c27da14bd869746dea83c3b1f57b865c75618f657807b63b42655a766301d4a273883781fbc4cce0a63d6","ssdeep":"","tlshash":"c4e0d81c860c2d2ca822c6a8df5a3179123e61a2330c425efc5d0574260552efc3bea4","first_seen":"2026-06-01T14:22:23.747534Z","last_seen":"2026-06-01T14:26:11.364731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/EmptyIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/EmptyIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 493\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-1ed\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":493,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e33a0eb817f2fccf88e1e2ee1f770ba","sha1":"91bd9b46da785ffb8083c10b0f9fa1504dbf8edf","sha256":"b5d645fed0c50a6b69eccfabbcc8b8313135b78a3708aaf08fc778b4325fc289","sha512":"6a84ae17bbe8194989f92cbe8fb412a627c11af4bc258e3f5634418b44b5aad088667c1d63a5191054e004317c7d745f1826e7573b48eb8a3666cbbea996f75a","ssdeep":"","tlshash":"39f02e45cbcc7b2d443a4354ab7df335032ba3e5b20c4d4dbc5d06a1a424099ddb75c8","first_seen":"2026-06-01T14:22:23.752972Z","last_seen":"2026-06-01T14:26:11.342058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nivex.world/static/svg/EmptyIcon.svg","fqdn":"nivex.world","domain":"nivex.world","tld":"world"},"ip":{"addr":"54.254.196.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nivex.world/","date":"2026-06-01T14:25:48.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.nivex.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 07:04:23 GMT","end":"Sun, 23 Aug 2026 07:04:22 GMT"},"fingerprint":{"sha1":"D8:AD:32:6B:4A:B3:BF:DE:32:26:A4:FA:44:17:9F:49:D1:80:B7:C7","sha256":"DA:F1:17:55:69:16:28:D2:D2:3D:EE:27:C7:40:EA:27:ED:EF:CB:9C:E9:2B:5F:DC:83:B0:0B:7B:2B:C8:3D:7C"}}},"request":{"raw":"GET /static/svg/EmptyIcon.svg HTTP/1.1\r\nHost: nivex.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nivex.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Jun 2026 14:25:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 493\r\nlast-modified: Fri, 29 May 2026 09:13:28 GMT\r\netag: \"6a1958b8-1ed\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e33a0eb817f2fccf88e1e2ee1f770ba","sha1":"91bd9b46da785ffb8083c10b0f9fa1504dbf8edf","sha256":"b5d645fed0c50a6b69eccfabbcc8b8313135b78a3708aaf08fc778b4325fc289","sha512":"6a84ae17bbe8194989f92cbe8fb412a627c11af4bc258e3f5634418b44b5aad088667c1d63a5191054e004317c7d745f1826e7573b48eb8a3666cbbea996f75a","ssdeep":"","tlshash":"39f02e45cbcc7b2d443a4354ab7df335032ba3e5b20c4d4dbc5d06a1a424099ddb75c8","first_seen":"2026-06-01T14:22:23.752972Z","last_seen":"2026-06-01T14:26:11.342058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-01","alert":"Sinkholed","trigger":"nivex.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}