{"report_id":"d0cd139d-a713-429b-9a76-47f387bb594b","version":0,"status":"done","tags":[],"date":"2026-08-19T14:00:47Z","url":{"schema":"https","addr":"nexaglobalfinance.com/","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"nexaglobalfinance.com/","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"title":"Nexa Global Finance - Home","dom":{"size":117311,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (596)","md5":"c595a2e425bc05f6a67525969b51bbbc","sha1":"d6c53b48e9825b585805af0145cb11feb9a41017","sha256":"a08072aba2cf29f491aedba1dcc3df9a72cc1920510e6aa48672fdf7f3e41de5","sha512":"ba2903f36c4337dc24204e70f295797091e1a0dfdadd1557dbc3f765ece94810a0002ef6655c86f2543f1a81328a62efbe590ce785ae4e36be12b4fb41bfe5b9","ssdeep":"1536:jOOYNhwK8jJclXuAOf7xj2SIoIcR8Ac07D+RS3:ANhwK8jCODxj2SIoIcR8Ac07D+RS3","tlshash":"13b34f7261f11037059390c9ab622b2f6ee5e50bc91b4628babd0b946fc3de7dc1355c","dom_hash":"domhash65f66ddd0acaaa231189d0af8ab7c43e","first_seen":"2026-08-19T14:01:11.101036Z","last_seen":"2026-08-19T14:01:11.101036Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nexaglobalfinance.com/","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T14:00:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexaglobalfinance.com","ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-10-18","domain_rank":0,"first_seen":"2026-08-19T14:00:57.795217Z","last_seen":"2026-08-19T14:00:57.795217Z","alert_count":104,"request_count":104,"received_data":8776563,"sent_data":129890,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":4,"received_data":112196,"sent_data":2356,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":12612,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/parallax-scroll.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"561cdc1a6dd173750e007c678385208c","sha1":"7b235b228eb2d084652307e68779e3a0863fe692","sha256":"6f190f0c4efea59a0dcea69c2d855e7cd37c56e621a506995654604d7a4e422e","sha512":"f236722f63817fcf59c9d98f1dc59faef985ddb79a89b03e7e04af493836ca9527ac1a877b0baca24a88b1fbef8604cd7a518e241162e9fc0a241fb6006771ac","ssdeep":"192:3tVmEaP3FCCCqeekidblijli0K+/g+67PzU6kB0g6:7Hq3Eqeeki07iP3","tlshash":"47022004e4a30521d5e771358f5e024ab72eb51b82a5d928bb0ddacd4f8093493d8ff6","size":8929,"data":"","first_seen":"2023-03-08T02:13:11Z","last_seen":"2026-08-19T14:03:08.07304Z","times_seen":500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/jquery.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a1b0aa0167c8a4df724d18d06814a8","sha1":"f3f468ccf735476c87e3b49e274eb3752a884607","sha256":"7aa6b0e08f48a0f95d8df7ea89e4cbfe1ef3d1e8c0f7373f7f25edfb4e4a325e","sha512":"05352a89084c3b747c375eea2107b9b3c660ffb5989d48f10ee30e4acf917db21fa7ce56f9b385de0fcfd0873c4c4e9d96c48f2f38e26d5cd5dd28ed792c3e06","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:vHNwcv9VBQpLl88SMBQ47GKO","tlshash":"3783f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87535,"data":"","first_seen":"2023-10-05T13:52:49Z","last_seen":"2026-08-19T21:28:06.085748Z","times_seen":7284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/magnific.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcabf2e2d85324d09429dde6484e4105","sha1":"0977652d7f946a8c532d535c75c0e19fdc5c3d45","sha256":"084a17681a83386f6c551844a31519482b905b512019c767e162e65e0b52ae85","sha512":"474eef11a74cf81f0af78e54ab1a39ae05993f32717ed7689a6afd94a14fc5d665233403332fb6559ba11ca48a40d0e9a1f76c278c2a1e1b69bceb3154e19917","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/j6l8aZwHwztLCpmst:lPBIt8I5h571qkOLCMst","tlshash":"a7921894f2b2b21383a735b8686f70093a729952ed06c855b55d94d87efcec89027f3c","size":20210,"data":"","first_seen":"2023-03-10T14:49:25Z","last_seen":"2026-08-19T14:03:08.058241Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/swiper.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bad59ca13a319e2d6682386a204cc7f","sha1":"0b2758a1b37dee8b540ef560d80d739ff95e13eb","sha256":"8dc75559ca9b5f3bd7b5bfa12c21c91ce81a72fdcc7f5d5e119d2e2fcd966967","sha512":"b5eea6a8b2c78eb7ca91bf86370e88366b332944a0ed8178279003ccb7b7b3fd4b3444bad1b9c4701c0b2349fe643481f4662eabb460ddd5eed97b4a5f9f4fd1","ssdeep":"3072:tJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvD:tJLC4dkEUYnafpl9v8cIWybV4y+oGMM4","tlshash":"40e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143661,"data":"","first_seen":"2024-10-24T21:44:25.872882Z","last_seen":"2026-08-19T14:03:08.148878Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/cookie.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d87ec77078513bfac7dec385a07abb1","sha1":"daffd330ad4aeb19761ac94c71e96432ae2ba0e5","sha256":"a49c235a27d8a30e6dab188452f01d3a8c4f8509e83afeb50c30f4da4febf872","sha512":"eebbb8f52511e4e8c6bd4b769e5e5d37f1191671058ea37884a9de0cd13b130a80f28cb21cb786f3dd39a49e67573290e0d0f873759afa2319f3346f6e67865d","ssdeep":"","tlshash":"1831de28b2e259bc4a27211587df83c6387011131065c54dbc9eebb11f84c1b8d7bae7","size":1631,"data":"","first_seen":"2024-12-07T19:45:02.408841Z","last_seen":"2026-08-19T14:03:08.050763Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b54b6ccf8fb51d48e1f581b2222b731","sha1":"ecb4323a64e98e46f9b9baf6b00b35b1ca467341","sha256":"b60e3b0baca2d096b56e9a10a1a4bed17e07df4ebdf4d1bd391a34b7e49bb21e","sha512":"e3d7fb615c2f3f55f8b225ba428ef74f7071a6e17831b8ef34dbca6c89e974cc04bfd6bb756806cfa7ef0b54445d4f323128c273957b5b12c13eec918467d5a2","ssdeep":"","tlshash":"30f02b2f6c791813613ba4844fcfa60a6769102b8549ed38bdce53c46f9611fd8d2758","size":473,"data":"","first_seen":"2026-08-19T14:01:11.306664Z","last_seen":"2026-08-19T14:03:08.156456Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/lucide.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b26c4825bcd6612f66346b35e0009f3","sha1":"f4f140ef2664821d2021e72ab523b4d1028215fc","sha256":"5f400c8bdf2a488952ec4b6df4b4d54171ade6fb9651a966ee4d973f63e05f4c","sha512":"8eb406e1af70ef5f1f3bdde08d3aa452ff7f199d81b60279d69b75f953b4fc2127f19c396b3f7d1890c93df9114494f3223420191511413a0d8357e612e6c93a","ssdeep":"3072:OlXuOlDhrEYDPjvkY1MJdBI17qg0PO4LfTjt5z10zj5C2fwcmFTgdxkNLg3IbZGa:CMYCff12RQgdYLhbL","tlshash":"776496afdfc9160f496ae3881a47b0121fed63be370a8c12768ed537e155816dcb3621","size":328731,"data":"","first_seen":"2025-08-04T12:09:10.989886Z","last_seen":"2026-08-19T14:03:08.096606Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/bootstrap.bundle.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80663,"data":"","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-19T22:11:01.378303Z","times_seen":21673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/custom.js?v=1.1","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"86854cda1005f6eadca8bfc575f5da7a","sha1":"4c1ebbc14e6640e9da04c22987aca480b289b977","sha256":"801c04c93ce86f91b7fc97d03d9072de37394a456e6355ed119ab3be46cd4270","sha512":"c8b3531dec8cc2f1b4b65db34540a31babb2327d9a5236609edeba96b944ba4df3aff7a79617281a39078d87ad5dd166cf80a0d741404b33267ac7abdbee8b3b","ssdeep":"96:XjvVIVhpkOLhIsyVQbuOMdMAlcPkk2kwwk/Sk6nkkPqI10N2NhV49R:zNkfkOyPR5dMrV2fwYSfnVP9ddgR","tlshash":"55d1910c7b0a1969da331ba48f3e9524ea6a5063a608c315fcfd56a05f3144ce0b7eec","size":6247,"data":"","first_seen":"2025-08-04T12:09:11.054433Z","last_seen":"2026-08-19T14:03:08.154261Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/main.js?v=1.0","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"946f1f45e590d4a58100253781222b2d","sha1":"6fdcbf9580f37eea6a85e65921d54b6e88510b89","sha256":"8cf2fc02277241a001622316b4ab0e35716c382677d41a901523af4afec663bd","sha512":"6a40a79ea64c96611755263bcaf4d9fe1e0888c6739f389cff5db89d1b9958907794145c5245609ab2795cd8f7041660e2987a25f00ae652299e87853a29ee01","ssdeep":"96:tMiGjsXwcr8EBOPqWoaS9a326eFqDcDQSwOsErHee8olIdVHP1:BGjsXwcYg9h9RzFqDcM0+iadN1","tlshash":"19b12e14b0f111b590bf30e59fbba5003a28404fd006de50f94e9fc54f95a74e6a3aae","size":5576,"data":"","first_seen":"2024-12-07T19:45:02.392438Z","last_seen":"2026-08-19T14:03:08.059156Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/jquery-migrate.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7064515a0f8915413e32010fda1d9cdc","sha1":"f333e43933d08da12a0101237626437c57d04ec4","sha256":"9a36b3ce2290685e4a6ce2ecf336383a07b665c818ac29a703a290c74ec43872","sha512":"66f87beb5c1a87cf6929e2a8cf036ce332e6dd5afc136c561eb673f3348ebac71e521007f67f21db2a0f8a7fd2b3c5344d40efd71462cb577a64b4181e6a7b1f","ssdeep":"96:5m3UrDAWhTAETMu3QXveMIIa8JdFFh7MyAgxr3KFBF/s++EHzDFvsiMAoe:5mkrDNhTeeMIIa8J/Eg96DBs+hlke","tlshash":"d212b79d7156b9764ff77678f03f839b727209d929098a00d26cc9ea342cc59813afb4","size":9035,"data":"","first_seen":"2023-03-13T01:40:03Z","last_seen":"2026-08-19T14:03:08.128724Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/select2.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c98b05dd4f3d7c693eb34690737f0d8","sha1":"6de10e74a992fca15e803d910d130f826631cb86","sha256":"f7244fff610595b944f76bf3080d74e3af42b5dd234f8f079e698cc39ac966b0","sha512":"e0cbdc1f071ba972941c1e8bc7765be4210056813dbbce2a37e65230ceacef3f08789ae2131ad5dcd0f9cd1cdef66c4d940049ea4f3ae0ffd597c9b449ddc3b5","ssdeep":"768:eLrL0yRTkmazJCf2B0eeKuWBcsGookOlxN3/fq0ZtjTTYovuYE4kpxcWQiIsoT:eQg2BneK38kOvBpXc9ST7","tlshash":"5c63b75c7a537231026f20e635ab140d22376b3e600a5668b068cded6dbec15736bf7e","size":73163,"data":"","first_seen":"2023-03-07T01:23:49Z","last_seen":"2026-08-19T21:29:28.704401Z","times_seen":8846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/jquery.nice-select.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-19T19:26:03.146031Z","times_seen":10713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/simple-notify.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad2bc46866970f4e3531b92b208311b7","sha1":"3f801f355fd60c7bb120f9848b2ae585be8ec4e7","sha256":"bf3b47ff379c977745be7afaff3e16addd26f5441eddd631297aed8f315f43e9","sha512":"38a24bea29c1915d580aa03558585def978871a283e7d7e4d009c2a690874bbbe9c51927685d9fea83c121f7aa5739e49f84875c764f101dd5b98a4441ff372e","ssdeep":"96:avJxHRh80fdLEgMu8FfMcVMr/jmgqYrVLowlBmsm/IGw9yatdkjr7f1Q6EuzYKNR:gnlPgFfMzAGowW/IGw998Pxrz3GQRgpw","tlshash":"89f14258f228243e41c7e49e506e4904a73e94b87584cd7c39adccfa5796ccce227bb6","size":7752,"data":"","first_seen":"2024-01-10T06:51:07Z","last_seen":"2026-08-19T14:03:08.075296Z","times_seen":361,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/aos.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","size":14243,"data":"","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-08-19T21:15:18.397168Z","times_seen":11979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/landing.js?v1.0","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"801b827d566a53403b1e2434efc32410","sha1":"08c5fd000ade0543662b2278aac89934d98c5cca","sha256":"29017c0589020b62194359cef6ea8a65a74af182294f1ccd6bf2b009dc22e19f","sha512":"65f0565226a1b8cb35c2fb8b8034044a3db3848655d7d3fefe891167103fd0b2c3209e8756a0366381a3663daa3c5dd4e01c19de91672a15f87ca758ed09da61","ssdeep":"","tlshash":"23610f08c97d012245776a2e4faf534067386147988fec727c4d5a698f4a22d49bb7f4","size":3255,"data":"","first_seen":"2024-12-07T19:45:02.397287Z","last_seen":"2026-08-19T14:03:08.042913Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/parallax.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e8d93141d507d04bac101e86ec0b74d","sha1":"dc7b2c284b6509824a332d83b9e272610bb24354","sha256":"b2317dabbcbed3b8623801fb7a9e6bd4f880820b6eab44640ee7ca41ba7822ad","sha512":"b5fb36c3614f77e3b1c3f51ffbe3ee4c6df158b4074da530a21909dd27ed331d9f8e692139b7bb7f3ae7826e41dee53fad7ad1b8e8dafcc3dbe6cbb00301de14","ssdeep":"192:QsN61Oq+4Xq47ehiWTUOiyWQbqwuBlZHsE4WIc/OncGe03aiU+sgJpR9W7AvD2aB:Qfv+Sq4FznZ+s8DiXu","tlshash":"9b721e4a2bba1c21e23b22664fdf9548b238951f1d03c45d396c52d80fe6974137efba","size":15991,"data":"","first_seen":"2023-03-07T13:48:59Z","last_seen":"2026-08-19T16:09:57.51417Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/meanmenu.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1a78e15b45e0497c3299992222d138b","sha1":"a30da9f858a3ce2ab3edcf07706337d2ca32d9f5","sha256":"4594db563a574092ecd91c9f357af5a366bebf76ddb9d1f4e680d63eca02795b","sha512":"a4051d48db93666b1e84261b6f5c4503f9093e926ceefb8a8f3409647e004622796a8765cdc8f15bc133c636b0d8a16166aeaec908cc4e4106855880006eba11","ssdeep":"192:QIsVd+89x+N3UXr3/5gSvB93q2I6ktrquz8Ikb:QrVd+8iN3UXr51JGpu","tlshash":"ca3285e0f37c11ae95761464b02702fe34bf823af449aa167c79dd79309096912e6fe8","size":11264,"data":"","first_seen":"2023-03-08T02:15:23Z","last_seen":"2026-08-19T14:03:08.051306Z","times_seen":484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.1.0","filename":"https://nexaglobalfinance.com/assets/global/js/jquery-migrate.js","line_number":2,"column_number":696},{"level":"warn","text":"\u003ci data-lucide=\"global/images/p9H9vDjTHZffSVaG02j4.jpg\"\u003e\u003c/i\u003e icon name was not found in the provided icons object.","filename":"https://nexaglobalfinance.com/assets/global/js/lucide.min.js","line_number":8,"column_number":984},{"level":"warn","text":"\u003ci data-lucide=\"global/images/p9H9vDjTHZffSVaG02j4.jpg\"\u003e\u003c/i\u003e icon name was not found in the provided icons object.","filename":"https://nexaglobalfinance.com/assets/global/js/lucide.min.js","line_number":8,"column_number":984}]},"http":[{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/shapes/triangle-shape.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.068Z","timestamp":1787148014068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/shapes/triangle-shape.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4330\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4330,"size_decoded":4595,"mime_type":"image/png","magic":"PNG image data, 114 x 141, 8-bit/color RGBA, non-interlaced","md5":"6bf2830878b184143b8232f65fda485f","sha1":"13cdfae84f3734e2852ab1d2321251ae1b2106aa","sha256":"c59d5c7e1f4ab94bfbd9c8fa680e9ab2f401ddb226a9e10c916d82640a917cdb","sha512":"984803d9e93f4e99ea7fbe98efa9da2184e58e1759796378d8693931b01c3174278c12dfdef5e602f99fd188ed700c69c71ca3c9f904b3ef050746fb23c12afb","ssdeep":"96:nSxZvlvW/ja62HNHVq6xGFe66ovS2WjbFChYQf4T:nSNg26eNHVHxWe6BvSVjb4hRfg","tlshash":"73917eedfc4166f8d9c0a1dbf8659533e4e9baf5983940089d5090549723c3bc454be2","first_seen":"2024-12-07T19:45:02.199969Z","last_seen":"2026-08-19T14:03:08.05476Z","times_seen":64,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/flutterwave.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.079Z","timestamp":1787148014079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/flutterwave.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53230\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53230,"size_decoded":53496,"mime_type":"image/png","magic":"PNG image data, 6080 x 1448, 8-bit colormap, non-interlaced","md5":"34a8a0af1b5945cb0dd66977b76b872b","sha1":"bc18fcac451246d245be9e92edcfeeaa5fdc6dd7","sha256":"d9c76a4d913d9a85a38bcece66519f4bfcb33595ca69877ee4cf0b2eb9abcff7","sha512":"d6cc720c62b5291c42a741b26fb90e2f94b31912a6c23c741224f481eccff74179aeb01d1d469be93799d9919342d0bbaf3ead33cec69a376cbb5b111e0750f2","ssdeep":"1536:tG/JgjxchR6tp4uP7IrL0fX/w0HLOa3RQepGj:tmgjWhW4iIuX/w2OqpGj","tlshash":"f733e1a1bda33a5bfd162c3cab7e96e472b531229198559f052e334bbd52ccbdc31021","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.112692Z","times_seen":237,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/coinpayments.svg","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.083Z","timestamp":1787148014083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/coinpayments.svg HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2319\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6782,"size_decoded":2633,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff0655a356a2fe56af0cb0aee08a94d7","sha1":"4586329db91e4c8e7d60635dea223ea926fa8ab6","sha256":"17d98ed1d91dfb6b149fcbd31893c750d379584bd6c5179674ec4100bc5297ce","sha512":"82102444757b698ab219f77d332fd1edb459d38789956f281c37c99c0b3c92ab625a5d0e39db8c58a7f13233e12c264276742c51cac3f4222af17c5c7ec5ddbe","ssdeep":"96:p+fQBMusIeg4GHYTex9gG0gfCvmHxIPeVf9RF3NYxMSS+2xK5WuaD7j2Rs0tsUJA:ypuVtqX4IZWSSHK5WuYBmAp/","tlshash":"49e11b134301f2aaea6a01b8df3a0cd678d4dddbe831d1d0abab643bd14c8e4665c755","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.126989Z","times_seen":250,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/btcpayserver.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.089Z","timestamp":1787148014089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/btcpayserver.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 29575\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29575,"size_decoded":29841,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"c791705059e807d7eb2b5633867bc188","sha1":"5f1cd1fcf8fd3de27b494979470a8ff90710e7ca","sha256":"6539d8686dd0e21f1eb568e5cd497be35113a9e6b7efed215b2a94026eeafc50","sha512":"d36292ec314a451e9b4af57fb91294eaee161c552152df69fa4b222fe0a3540776edd3c77eb1411608bfc463f3d5f51396cf5fd4a9d8f0ac54970778aebda85c","ssdeep":"384:NrNmSfCk53Xy6fSNEw613gV4iFG/O6j/af1AaW9HwvgeXatErz2z0mT1cVZsHm3c:NhmSfCklC6KpeDOoGyaVOgxuWVLq3rX","tlshash":"85d2e1a12690b453c40f57227d8f763eabc901289c8f837cea6fb0313632b49205de95","first_seen":"2024-07-17T00:16:24Z","last_seen":"2026-08-19T14:03:08.142356Z","times_seen":217,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets//front/images/shapes/footer/shape-01.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.102Z","timestamp":1787148014102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets//front/images/shapes/footer/shape-01.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6828\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6828,"size_decoded":7093,"mime_type":"image/png","magic":"PNG image data, 136 x 148, 8-bit/color RGBA, non-interlaced","md5":"a6cda153fc62b3507af5d3c9d71d6841","sha1":"726a81aac95e6f40539241147a673f9c2888f204","sha256":"c883300cdb6ad7ede92bf213f68dc971994b98e3e3c7242f3b9f755b2f55f51f","sha512":"e3fe296b9cdc5575c22fcc9e53a9f4d45a1d587720d21dee766b9178c6be07e08de4a7bca0b89eb820a5ff21f3f192033f50078c20ee98043b4d72eac44aa8c5","ssdeep":"192:CSZh+31wYY8I5P4MG2Cak547VudGNd4Fy9s:dZA2YY/xzRCfpQL9s","tlshash":"7de18dca3a4c13180f1ce91d7b8fe658ba8d127e298edf51586c353ac444ae9a8dc785","first_seen":"2024-12-07T19:45:02.258923Z","last_seen":"2026-08-19T14:03:08.047415Z","times_seen":65,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/css/simple-notify.min.css?v=1.3","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.984Z","timestamp":1787148013984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/css/simple-notify.min.css?v=1.3 HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1311\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5718,"size_decoded":1620,"mime_type":"text/css","magic":"ASCII text, with very long lines (5716), with CRLF line terminators","md5":"ea9b48b1b8b03e54b6ff294f653830fa","sha1":"fee471629a422d774ae0aa4d08db7c480a314367","sha256":"a93d6c74d9fe389fcad735fb1905befe95c7c9d30823a0d9b959048ff6119feb","sha512":"0150cd49b651abe86b4cc625e99a9eb4bafa14616c0e2e3fe277ea9742253999a5565d0c560e1aee6c42876d9d6346d2d3ad32936599ba5aa55ecf0d7ba842b0","ssdeep":"48:iSD+ooSGoUAoMok5AMIgU/THWT9bLQKjxTdOLyhwo+P/2JQ7nYTF6BW6wNDlkDx9:iNRUc9k6/rchDOLawBK0nYR6BW6W80i","tlshash":"17c1f24dabd3c8a1ae83d35f5289d93ae267e0014b17996c13cb5752c5c62fce6827c4","first_seen":"2024-01-10T06:51:07Z","last_seen":"2026-08-19T14:03:08.07088Z","times_seen":322,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/tIAFn04UV8M4Eotgkms5.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.039Z","timestamp":1787148014039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/tIAFn04UV8M4Eotgkms5.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 119490\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119490,"size_decoded":119757,"mime_type":"image/png","magic":"PNG image data, 359 x 168, 8-bit/color RGBA, non-interlaced","md5":"63d0e878ddcb1a3c86ee5671b269e62c","sha1":"a9f79b28471bcac3b216fb02ebf973a51b39d4b7","sha256":"9722c9df10e97788791258db2edbf010eed4e6b0f6e539ccf3a2d73a00a18a74","sha512":"2092a0be4b0c5c9f92da343f1224db2f108856abb0149b4faf055162ed45aa13808e2270723433e1fab7b1dee9e581053750923101d0aa8552ecc9dc2c2873d4","ssdeep":"3072:8U3RaFbNqNE8hCfx8m0IMRjkCDqQyM38ya3/a55oBjmAhff2q:DAFBKEFMRjkCDqQc7vaXcBF","tlshash":"b3c312629c0c4ee6f5dfa6ea45a02d5870eca6d5e237d12b49f77a03b58c03c474a5cc","first_seen":"2024-12-07T19:45:02.269078Z","last_seen":"2026-08-19T14:03:08.111139Z","times_seen":62,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/paypal.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.071Z","timestamp":1787148014071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/paypal.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70601\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70601,"size_decoded":70867,"mime_type":"image/png","magic":"PNG image data, 2560 x 678, 8-bit/color RGBA, non-interlaced","md5":"e7eb3f3c0b12363bf15cf037c67f2567","sha1":"f916c1cc819f1956accc80cc6f37d97ea320106c","sha256":"59c1eeb041e968c468610acd97870cfa9ea1ac91e6934fc7f983bfe48e2edc64","sha512":"29c7ea0369303326944e3840e2f6bfce8314141b265b5d1677e2e85c98d196e681c4070df827d0d4805b5b5c9bcead0d074e0ec6a702c626f179b123aa9538ea","ssdeep":"1536:lVucnYQqszosRqjUUy/lfyLXzkTdrZ0SXBCSqsZnf:ruwIszLR8UUy/lqTzkTdlFBWW","tlshash":"576302bdd91ee4f6c1d95e3d2e3badd284181db3e015eec0b0ab615d1e8e32534882d6","first_seen":"2024-10-24T21:44:25.753806Z","last_seen":"2026-08-19T14:03:08.11652Z","times_seen":152,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/nowpayments.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.084Z","timestamp":1787148014084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/nowpayments.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11360\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11360,"size_decoded":11626,"mime_type":"image/png","magic":"PNG image data, 753 x 112, 8-bit/color RGBA, non-interlaced","md5":"d4b0b52771b30fb87e8a741cb707395c","sha1":"a09cbc4cdd4d6b18d130d65116ce878369b526ae","sha256":"55da2ed17fae766a33c46ca0dd8ffe921dfc7d92987f81b0c4672123787ebb08","sha512":"a971b5240da31ff8808ac7032bf15de3aed602857e1b44b8c239e296585c47c658d85302b31e51c2a32ad75e05d0115d7514a4ddd8dd4103aee2f62c84ea266f","ssdeep":"192:k+Hc2krrx7dnvHbvbKO3q7idMOkZJoaVcVnStgF9kr47YEcU7kch0sGmBUJ6:kKqdn/fFMOaakcE6jkU7YVU7kcOxUUJ6","tlshash":"8232ae8233bcfa1aed6375ba914caf4b15f3208c45935438ebb7c55cb948f7981185a2","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.099004Z","times_seen":241,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets//front/images/shapes/footer/shape-02.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.104Z","timestamp":1787148014104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets//front/images/shapes/footer/shape-02.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6470\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6470,"size_decoded":6735,"mime_type":"image/png","magic":"PNG image data, 185 x 158, 8-bit/color RGBA, non-interlaced","md5":"3fbcc14d5e6c2e754f22c50d91b068ab","sha1":"616d7cdcab463cd95bd981056476aae484920b26","sha256":"0b91d0eca45a60beebece9d59846dba7e5a0fb4818f00f9591c5b9843333c98f","sha512":"bfa9833c1225e4903c738ce574fac09428c1d70a8830130af90d8215303da267de4c0f8ccf8abe8d9847f026f121c7acb307ba25defa71deb3117c37e67838a7","ssdeep":"192:9SZC5Eab9AXsrk+CNmI0EOkSgTlYv1oTmjo:8ZC6Gj+lQg+qm0","tlshash":"3ad1af3f635f81ec88ae53b1e702e2483a6b97c31f4b0fd8785a6ec941b71256c161c9","first_seen":"2024-12-07T19:45:02.260844Z","last_seen":"2026-08-19T14:03:08.122411Z","times_seen":65,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/pJKbUFqIorpzdmi8H0mJ.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.656Z","timestamp":1787148014656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/pJKbUFqIorpzdmi8H0mJ.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7892\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7892,"size_decoded":8157,"mime_type":"image/png","magic":"PNG image data, 496 x 462, 8-bit/color RGBA, non-interlaced","md5":"b7126c2c8a9d38d6b0cbd939fa321305","sha1":"3d53f2fb746aa5721d1700c7c4c79965220fc902","sha256":"4cfa75aa51971a4cddaf2738094179c7bb6803f7b6f73c5aed1d597df62d8a8c","sha512":"5af905f6f59537915865d844b501745cb0d4b53e854a4f2e455e0685cd027b4576473133197dbe9215d889cfab6c2c6a960b3ab3f558b8537ce7f777cf3f5111","ssdeep":"192:gSFcpxq0zbSabJXNZcb0cDJZNCCLGDq07nVy0ruDUB+/hGu9:HFcpxxVXNZWDs9ODJ/V","tlshash":"e5f1bfbcac3f8e847e014870d61d15c43f9d15d76066a8e827867e12b2f8e4c47adb03","first_seen":"2024-12-07T19:45:02.159981Z","last_seen":"2026-08-19T14:03:08.09092Z","times_seen":66,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.721Z","timestamp":1787148014721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexaglobalfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 540373\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-19T21:36:58.22526Z","times_seen":20655,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":28,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/bg/faq-bg-pattern.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.813Z","timestamp":1787148014813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/bg/faq-bg-pattern.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 221963\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":221963,"size_decoded":222230,"mime_type":"image/png","magic":"PNG image data, 1920 x 1163, 8-bit/color RGBA, non-interlaced","md5":"1b8313798f4b70cc0afcfddfcdf58c41","sha1":"af0a07fff5b1e198be02a426657e1ef2a3d89188","sha256":"7b59a5d3c32f17068e54ba1fbcb011f4b6f02ab21309396b3f3a6a35aab2624c","sha512":"287d6a39c8e3f3cd37c9a23cd9cdf273ddf7e3ecec13a7473ef5a0d1ef7a22f8f2715df90f8050c547b8e60cfd76af939eb381e8b8ca8e3e075e41f028199288","ssdeep":"3072:fq+kpru760XbfTvEXxxEKLDum88dLgn3EEVNC9yKWn1VSRakz2eRhTPE5wW:fyx0Xbb0Em8SLgnoARV0ft/TPE5Z","tlshash":"e024136180620b96de0e03ba0ff75f15ab11e169da4271be5375f628f81b7dc2222b53","first_seen":"2024-12-07T19:45:02.320693Z","last_seen":"2026-08-19T14:03:08.099734Z","times_seen":61,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/swiper.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.015Z","timestamp":1787148014015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/swiper.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 24 Apr 2024 16:11:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38115\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143661,"size_decoded":38353,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"7bad59ca13a319e2d6682386a204cc7f","sha1":"0b2758a1b37dee8b540ef560d80d739ff95e13eb","sha256":"8dc75559ca9b5f3bd7b5bfa12c21c91ce81a72fdcc7f5d5e119d2e2fcd966967","sha512":"b5eea6a8b2c78eb7ca91bf86370e88366b332944a0ed8178279003ccb7b7b3fd4b3444bad1b9c4701c0b2349fe643481f4662eabb460ddd5eed97b4a5f9f4fd1","ssdeep":"3072:tJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvD:tJLC4dkEUYnafpl9v8cIWybV4y+oGMM4","tlshash":"40e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2024-10-24T21:44:25.872882Z","last_seen":"2026-08-19T14:03:08.148878Z","times_seen":124,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/landing.js?v1.0","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.025Z","timestamp":1787148014025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/landing.js?v1.0 HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 10 Jun 2024 13:52:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 948\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3255,"size_decoded":1184,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"801b827d566a53403b1e2434efc32410","sha1":"08c5fd000ade0543662b2278aac89934d98c5cca","sha256":"29017c0589020b62194359cef6ea8a65a74af182294f1ccd6bf2b009dc22e19f","sha512":"65f0565226a1b8cb35c2fb8b8034044a3db3848655d7d3fefe891167103fd0b2c3209e8756a0366381a3663daa3c5dd4e01c19de91672a15f87ca758ed09da61","ssdeep":"","tlshash":"23610f08c97d012245776a2e4faf534067386147988fec727c4d5a698f4a22d49bb7f4","first_seen":"2024-12-07T19:45:02.397287Z","last_seen":"2026-08-19T14:03:08.042913Z","times_seen":66,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/1uVmdr5pidTSx6DiVIoH.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.040Z","timestamp":1787148014040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/1uVmdr5pidTSx6DiVIoH.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 112961\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112961,"size_decoded":113228,"mime_type":"image/png","magic":"PNG image data, 359 x 192, 8-bit/color RGBA, non-interlaced","md5":"801066c72a1c01b7b47a00cab937ec71","sha1":"7cf1617e4d6e64295a6351e574a99cbef40b2f86","sha256":"33a7f26a5fdf114986b7abee48877b3365239dc9f0641e18ec23a417262c2626","sha512":"6c06fec7d166b267073a8254f30bd3a0b75e4fff689fbc241112cee0beb88149bb82846c5a26a27c86d24499667765cbec056b8548ce1392c9165082b90fa908","ssdeep":"3072:HV5OkdxW1CA41y3ejSS9IIJ+SJfQ0JYlIWQz87wfbzKm+PZ:vOowt3ejSSHffQ0maS7wnOPZ","tlshash":"20b3126787b5df0e3da865bf2fe1c64a974651b286b137988143f8e61f1728ec0cc609","first_seen":"2024-12-07T19:45:02.271103Z","last_seen":"2026-08-19T14:03:08.051799Z","times_seen":62,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/6WNNQQuh1wsN94HrO2xX.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.051Z","timestamp":1787148014051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/6WNNQQuh1wsN94HrO2xX.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 191008\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":191008,"size_decoded":191275,"mime_type":"image/png","magic":"PNG image data, 824 x 512, 8-bit colormap, non-interlaced","md5":"8a27166b62d995c48a3117dac4edae99","sha1":"7ffde8818d3303e63ada7691024d817621a61028","sha256":"3ab1d9b138453d6e2fe20baa6fa98c015012cc21927d768ed1b2f149c3b5c738","sha512":"e92ecd7c645839be46e1e9ab3af60f0b7cae89ff560353bb3f410a58ad3977fb30ecfbdb2f16e26310fd9f5827310a3f3d1ebab134230b258bce744011fc1e61","ssdeep":"3072:AwDdLnpiHAT/OZTP3zAlnYl3OvYv4y4sOzPkDCkZpq4Qs/cuAbnYAwk:AmdbI22ZPj0uOU/5OzNIqrYBAbnjwk","tlshash":"921413b1511562be18e538fe25f10e86e7bd02382db7cb86f152b334e4599a9b3318e1","first_seen":"2024-12-07T19:45:02.297267Z","last_seen":"2026-08-19T14:03:08.073802Z","times_seen":63,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/1Y1dqiMzx7KAQHF6Ntb9.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.061Z","timestamp":1787148014061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/1Y1dqiMzx7KAQHF6Ntb9.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 502305\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":502305,"size_decoded":502572,"mime_type":"image/png","magic":"PNG image data, 1280 x 897, 8-bit/color RGBA, non-interlaced","md5":"a26aa52d552719a1f9bcf4969cbef6f0","sha1":"2e2ef1888aa8053af504058e60534f47b149c464","sha256":"041a0184e6209d51be2e5f7b9c50620bc67788a5c259f295591700153c5342fe","sha512":"89f8d2159617f4cdffe66ad32ab0d2e1051d941493d0e69b664518eff8d1f8f3212579e3981848ddf6332ea5bbad86bea51bf0c406ecb697a4f11997a6cf3d4d","ssdeep":"12288:VuRycBhZItHzWFUVGxCu0Lq0lgHSRkJ5C1SWO:V9cBhZ8HzW/Cu0DlgH8kJkYL","tlshash":"17b4233aebd499f2e1b7af361784c73485768ef8863c25a0011e3dd96e142db2721768","first_seen":"2024-12-07T19:45:02.30977Z","last_seen":"2026-08-19T14:03:08.097235Z","times_seen":62,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/paystack.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.076Z","timestamp":1787148014076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/paystack.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25338\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25338,"size_decoded":25604,"mime_type":"image/png","magic":"PNG image data, 750 x 400, 8-bit/color RGBA, non-interlaced","md5":"02b3de2445d8036e8d0bfaee65205514","sha1":"27dd91ec96dffab1d86e36bc3928be47253a585a","sha256":"238ccc697e1e1277d94a625d1bca410d64819ca40872a5319dcee64633e13632","sha512":"fb66224aecc40880e27f46b65bc2304958d0cb79e68255fd0d55ed81be69edff8413ecc7accf7e9465638610691499c3407cb8daa6ff68208cb88ec52d18a569","ssdeep":"384:fZ32zV3R2DipozF4my4R0hjUP1fWO1y7QFxcgUASSuILPAK8YqOm5Q37AhHKW7V:fmTqzFXxGcBy7QFxc/S3AKB3myIKsV","tlshash":"18b2bf73d4356e63c9702b71275613c498b62efe847c38455ac93d89833edee3820ada","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.111669Z","times_seen":237,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":207,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/binance.svg","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.090Z","timestamp":1787148014090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/binance.svg HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1604\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3965,"size_decoded":1918,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"356a46107958da103a2754e5158c2beb","sha1":"61c48d99f22b8123281055d65fb3c1bd533de9ce","sha256":"90782214433aa91a2396e3aef6f721a9536c0b6b75b6992fc7461c79463d17ea","sha512":"ce5271fae90d5c82edad1577446a6232187aee327a35d0ba8a7776a0d97dd59ebeabaea7e5d7a0e292c1521451f5bd330ae6a665321bdd50e0799a961d80907e","ssdeep":"","tlshash":"47818394131d48a8f2b945984e3430c9ee1818df6a5092a4f75f7b062f7b0e3f453b1d","first_seen":"2024-10-24T21:44:25.839938Z","last_seen":"2026-08-19T14:03:08.064701Z","times_seen":180,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/instamojo.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.095Z","timestamp":1787148014095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/instamojo.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19218\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19218,"size_decoded":19484,"mime_type":"image/png","magic":"PNG image data, 2066 x 474, 8-bit colormap, interlaced","md5":"1e2345bd1e64caa036564ec8a7bfef2a","sha1":"ae7360442cfa8e94d774d459ed48d84db5249370","sha256":"f24ed6bdaa920b586207edea2a21587a7d4ea8b1b00a1336091fe44ca4ccea36","sha512":"c31abb6a247e1c818201510f93218871012df211fcef6b26b217f28fe353c19beef99353b0211b4243cb1319f5be91b9a474648af2cb2d5727ca71afea2f7ebd","ssdeep":"384:2aV8OP9nbeDxEDj4hCwI6erHxY0pL3vnFBrSHUquaGe:HCO5bedED0MwIpltjVqu1e","tlshash":"9482d0a31912b4a5f113a5f8887f1240b13d3795f1015ece6254d3f720babaae33626e","first_seen":"2024-10-24T21:44:25.824665Z","last_seen":"2026-08-19T14:03:08.121347Z","times_seen":181,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/bootstrap.bundle.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.008Z","timestamp":1787148014008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 14 Sep 2023 09:10:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22905\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80663,"size_decoded":23143,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"6baf57f25796c332144ed58a2a0cd9ee","sha1":"f7fd0f3dc84b2cf93bf81e832505a673f354e0a3","sha256":"82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd","sha512":"5ff6240d9ca34dfe30c9cd95cb5e981823c7c0063cad9258f8f3a0a24663401da684844524272410673a6325fd78db0f7e7d0fcd3844b8db3eb9aa2613908ee8","ssdeep":"1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8","tlshash":"cc73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-08-19T22:11:01.378303Z","times_seen":21673,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/shapes/faq-02.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.062Z","timestamp":1787148014062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/shapes/faq-02.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 18 Apr 2024 15:18:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5603\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5603,"size_decoded":5868,"mime_type":"image/png","magic":"PNG image data, 110 x 120, 8-bit/color RGBA, non-interlaced","md5":"3b22e17f8c73a73eeb71577badcfc01c","sha1":"10584e4b1b61a94e8ded6eac7d1f3c597e86e9d9","sha256":"5a02ba23df6b6d6b9746d845175625a1cfc8ec6dd7d373d9af50a19ab6efc177","sha512":"32ba1827e6a4ea3a1044475447ed8a99be50b164dad2098e65cd90ae767c7776185d1e3137e5f21bdfbc970cf10c431737338c1c27b12c2e3ca5a99b96d21581","ssdeep":"96:WSbq20EF5wr3K/Lei7wGvoqekLOzZCbH3++EeihUD1STJPIQLewyz7vB1Vdfs5vj:WSbQEjwr3K/LeisG9NCzZcu+mhzpgPXC","tlshash":"35c17dd2f2845dfc5b9b7b92d0cbb5a1f6dd1444c342ac911bb47850a027627b582dcb","first_seen":"2024-12-07T19:45:02.176211Z","last_seen":"2026-08-19T14:03:08.052886Z","times_seen":62,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/jBtYMPxBtgqK31xWfXzC.jpg","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.070Z","timestamp":1787148014070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/jBtYMPxBtgqK31xWfXzC.jpg HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34240\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34240,"size_decoded":34507,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3","md5":"1d4fb95413f17b4fc45b9591f6f36c4b","sha1":"d473ce84560e8a400764d7ee7d617e0b272ffbf8","sha256":"9b1e2b12170ad8db7c157422a4f357c0d9f7b360985f955e3de165df796352d2","sha512":"2ce0dde882b9ddf58ab0b955f3b00bc5c1007ca59f91bfe889c1ea63b113647bba34bd1ad84cb6b1e01005a353414f85a7478c1940cd125f8b80a76a64e53797","ssdeep":"768:CmstZURrSrATMRlhWK2Hho4o78fJbC9vQkWQcTkEo:uZgOrUGlgK2Hhotwol7+Bo","tlshash":"c3f2e1b9d4ce239cdac40a72048ec22b18f4b66c4935f12d5fe59ff5ae458690a0e723","first_seen":"2024-12-07T19:45:02.20535Z","last_seen":"2026-08-19T14:03:08.055438Z","times_seen":48,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/securionpay.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.082Z","timestamp":1787148014082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/securionpay.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12345\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12345,"size_decoded":12611,"mime_type":"image/png","magic":"PNG image data, 500 x 127, 8-bit/color RGBA, non-interlaced","md5":"1f697b9a4fc888b484591a92e6cc0ed0","sha1":"dbae8db033a99c3bad2966fe88898e54554634c9","sha256":"165670cfa17e124d7ef145288d17a54c0638310ab4674ea8ab2ca84e2c188174","sha512":"9762b62b92252b8a6e0af2dd9fd5fb8a25ad7a4b10bc0a09fbedb19a43a5320455c4fc9ce423d2270f3f929876d78e357a338538e57025729fbfd08511c12229","ssdeep":"192:YnKgu0kYqM3pTGL2xKWFFJU09NGKAngO+Ia3RIE+xxKFze7kTuYU094yqorP:YnxrCL6KWVfNGKMgDGE++kkT/1/","tlshash":"1242c07ccf73e68f62a1feec415450a11d60b5af964f074d6cc240ab060e8d78cb44b8","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.046368Z","times_seen":237,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@200;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.512Z","timestamp":1787148014512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Plus+Jakarta+Sans:wght@200;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexaglobalfinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 19 Aug 2026 14:00:14 GMT\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11928,"size_decoded":1387,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5d617cff7d2b8ccb6e396a9eb002c6e2","sha1":"2555c59ee6b78de4b1398bf5cac2102c10a5d0cd","sha256":"af2374f932b2d135a5afe8a3fa2e3fba6c8d2425566d4cc92d46607900ece8eb","sha512":"a3f2ba9fd9e5d429a1bc0f22c13740733e580d73f6f869bf82874b2b2a4d62189f77dbcbb27a9cd48debacecd16011128c38047c652ee35e072687b1a1f25c8b","ssdeep":"192:OCf7Rs3CYURzeCFJRSdCmaRBUCj3Ro7CcQRvSC5VRed:V1fdrF/0","tlshash":"8d32a2a0092fa540eb831cc663cf3d3a9e9e6196601584b99bfd0858dc7ec2a7375b1c","first_seen":"2025-09-16T15:17:42.431396Z","last_seen":"2026-08-19T14:03:08.146488Z","times_seen":320,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.718Z","timestamp":1787148014718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexaglobalfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 540373\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-19T21:36:58.22526Z","times_seen":20655,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":17,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.725Z","timestamp":1787148014725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexaglobalfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 540373\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-19T21:36:58.22526Z","times_seen":20655,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":34,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/fonts/fa-solid-900.woff2","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.727Z","timestamp":1787148014727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexaglobalfinance.com/assets/front/css/fontawesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 348036\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":348036,"size_decoded":348304,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 348036, version 773.768","md5":"6746ef312ee85bb5431466760df933fa","sha1":"aa8deedb642d673a15858fc1da27f9537bfeea11","sha256":"25b8df945ab6bdb4ac6f55a345112dcdc89907e9b0c37bab18e6fea90ba035ca","sha512":"7f2f98fc4a4e66ab1aed422521f8e15a32235c88234cfde9dfeda98e51fd64fb72f592c049e942ae8cafaf465f758c3c86efca219dad51cc7a076c4a1e33fbf9","ssdeep":"6144:dqw3McT1ChP3kD7UxY9U1n3UXnzDRXNtQ4dF0mgTiTg66TdOQFu3Ko/AWmj:dqw8G1+3GUSQUXzlXNtboTiU6WOCu3po","tlshash":"517423495bdd201fcae538c39472211eec0d343a3a579d9ee44fa807ac9f7942ce259d","first_seen":"2023-12-29T09:06:17Z","last_seen":"2026-08-19T19:28:39.577859Z","times_seen":3333,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T14:00:12.717Z","timestamp":1787148012717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; expires=Wed, 19 Aug 2026 16:00:13 GMT; Max-Age=7200; path=/; secure; samesite=lax\ndigital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D; expires=Wed, 19 Aug 2026 16:00:13 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 12047\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-19T16:00:13Z","raw_expires":"Wed, 19 Aug 2026 16:00:13 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; expires=Wed, 19 Aug 2026 16:00:13 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"digital_bank_session","value":"eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-08-19T16:00:13Z","raw_expires":"Wed, 19 Aug 2026 16:00:13 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D; expires=Wed, 19 Aug 2026 16:00:13 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":96392,"size_decoded":13563,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (507), with CRLF line terminators","md5":"7639613a42c627e04ed86b8f7cf85a77","sha1":"4f86108807efa114511787769ded07799d6b786e","sha256":"a7d576aacd0cd7c77e4ae828f8e01d52c3f4404394d6aff39d3a8e3e795f371c","sha512":"cbf36386ecd075de3610b03844539aecbdb33f0a472e630b49fb456dc8c349e07e52f9f758e8f17ab87fdd08b3432ca143ebde58f472d3957fb0754726a22e3a","ssdeep":"768:rEjuZJJ2VyGCP6xOM/qrUXgIXtyljBkGAaKcl5l5U5Q5m6c:rJJcghUXgI9iB2BcV5m6c","tlshash":"d893eb7625c01037057381c99b612b9efee5810bca5b9618bafd2b976ff3da6dc13108","first_seen":"2026-08-19T14:01:11.147406Z","last_seen":"2026-08-19T14:01:11.147406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1055,"timings":{"blocked":-1,"dns":98,"connect":29,"send":0,"wait":890,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/7wRPyKn9kxgBybd2S6L5.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.037Z","timestamp":1787148014037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/7wRPyKn9kxgBybd2S6L5.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91725\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91725,"size_decoded":91991,"mime_type":"image/png","magic":"PNG image data, 359 x 192, 8-bit/color RGBA, non-interlaced","md5":"feba713b9c7f5c5d3f6d799f634f2450","sha1":"b4c8a5c0addeef1c8305f19ca9e06a931ab2b58c","sha256":"da2bd2e95e8f295677aea82dbf3860d015731e5cbd9115242eeb34cdf00188e3","sha512":"b102dca14f19470f8fa68b2d917ec22cfb3f4db7769f84b80c80465fc785e9544ed0f4cfafd27f3232e3f32dd9d563911eaaeaff4d08303c3d51b61b584ca92e","ssdeep":"1536:IadBDYJ80vxzygcoDh/T2o8tzPolMhSYkYfwQ/PAxNKdEi9NZBO8VD3YU5nF59M4:PbYCuygcahR8BPPh1D4a6i9TVBnF5q4b","tlshash":"25930212b4666e2fd693e8f614f8bfa5490691601d4349aa3f1ce0cb42951f17ecc373","first_seen":"2024-12-07T19:45:02.265122Z","last_seen":"2026-08-19T14:03:08.103907Z","times_seen":60,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/x1AJhPJgfB30mkoLjiG7.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.058Z","timestamp":1787148014058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/x1AJhPJgfB30mkoLjiG7.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 150158\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150158,"size_decoded":150425,"mime_type":"image/png","magic":"PNG image data, 801 x 536, 8-bit colormap, non-interlaced","md5":"7267d1de8853f803c9ffad840f3fc1d9","sha1":"8a1943808927ad0237a2ba5004f558b38d1142ce","sha256":"bf9f6a643384c9393d725b7d5a635ab0957bde48612c1ef98c0d13339f3ce335","sha512":"ef1fe11573b7b1cfea738f7d8bb16d4a2b09db7ce8c4646ebd31e6972d98ee68e9f9f649df04a089d390fc84ad354752e55366f7c7e02cd68df643bfc7d3ef98","ssdeep":"3072:og+UGVaGkf4ct2JYowpGQVHN/I0RU5uSgqRScBleACRKgRqskXqEw:o3Va+ccJT+4uSgYtl7CBEw","tlshash":"bee3238e16958e22e050d468459c3b10eb2ff849744bb93f6db86728dc34f2a647d2fd","first_seen":"2024-12-07T19:45:02.29919Z","last_seen":"2026-08-19T14:03:08.06274Z","times_seen":61,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/fonts/fa-brands-400.woff2","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.729Z","timestamp":1787148014729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexaglobalfinance.com/assets/front/css/fontawesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 118148\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":118148,"size_decoded":118416,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118148, version 773.768","md5":"486320787055097851e516e747797909","sha1":"3a9a3efe266a4f329bc86e2bac22b7185ff0cd45","sha256":"5127b133655d52e7f123265ea329f9fcb21db9d02bbfd2265cf0a8599e9ebcb2","sha512":"6473cd3ec9c1e05ca7cb93a350b8ae4717113511832ddcb5d88efa21e9d5a758a7c99893e7f7159b96842b8d99ce6445abe7e38e96417e321366c07c1dd31b18","ssdeep":"3072:1KMmcbwbEn9QJx/EtCNHl7z74oG46DjuMz:1Kj3g+JxctCNHlX9uqQ","tlshash":"7eb31206273dee46ef08a9956d2c0ddd3e05c3c4837cbc2a6f583964b62f46c29918e5","first_seen":"2023-12-06T19:31:50Z","last_seen":"2026-08-19T19:28:39.539763Z","times_seen":2417,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/solutions/bg-pattern.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.785Z","timestamp":1787148014785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/solutions/bg-pattern.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 157036\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":157036,"size_decoded":157303,"mime_type":"image/png","magic":"PNG image data, 1920 x 1163, 8-bit/color RGBA, non-interlaced","md5":"3f73c45a559bda471356b36234502d05","sha1":"920a4ef680b021162df86ccde5b3e980c57aa9b7","sha256":"5e7c0e12bcb1d1c8524b8157a7f703190d06547006b0616ca0635d44bc4500bf","sha512":"795c05648b6faa546773416f951ac8143d0bd12e76431672a03fd523f25a442ce36f57407ec80c4a3844c5954b5736ab3be0f53558eb21bfe7ebdfdd756e62ee","ssdeep":"3072:jADT7BiA4XiubLR+GYjhLfqQC56lLvtpPamxBHz3TFZDfUEVQCDse:jA3liA4XTLR+DhLfqQIiTvzT3jMVS","tlshash":"1ee3126585978ee0ee580b7efae70f347bef5d5d0817131f9732a8846e926002f528b1","first_seen":"2024-12-07T19:45:02.318325Z","last_seen":"2026-08-19T14:03:08.123673Z","times_seen":65,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets//front/images/bg/footer-ring.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.820Z","timestamp":1787148014820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets//front/images/bg/footer-ring.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142710\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142710,"size_decoded":142977,"mime_type":"image/png","magic":"PNG image data, 1920 x 960, 8-bit/color RGBA, non-interlaced","md5":"b897718e435d371f5ce249fd14f9e933","sha1":"f62458a65c1b9dc797349602f02471e2629874cf","sha256":"f3819fffbffca86c680eaeca71a89951920d2dd8cf9e4749ae42b07a27de98ea","sha512":"1f83a6e5ac8ada579be6ede6738b7b6f498b2c782d8c89ef496ea4455658aaf3f56994303bd668f86ea311f87d25f2087d6eabd7ec97702a4f53ac2babf09c6a","ssdeep":"3072:ERuWGyiboDpRNxoamjWjHSyeraJgLDmb8xlYpNmoVrAtc3b:wWWNxo1WrPgLDS8PoVMk","tlshash":"d8d312684a7ac643ddb7603d48ab9f0323b24907d1e2521a832cf65d3a62df4e4dddc5","first_seen":"2024-12-07T19:45:02.330479Z","last_seen":"2026-08-19T14:03:08.100846Z","times_seen":65,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/jquery.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.999Z","timestamp":1787148013999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/js/jquery.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29737\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87535,"size_decoded":29975,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"c9a1b0aa0167c8a4df724d18d06814a8","sha1":"f3f468ccf735476c87e3b49e274eb3752a884607","sha256":"7aa6b0e08f48a0f95d8df7ea89e4cbfe1ef3d1e8c0f7373f7f25edfb4e4a325e","sha512":"05352a89084c3b747c375eea2107b9b3c660ffb5989d48f10ee30e4acf917db21fa7ce56f9b385de0fcfd0873c4c4e9d96c48f2f38e26d5cd5dd28ed792c3e06","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:vHNwcv9VBQpLl88SMBQ47GKO","tlshash":"3783f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-05T13:52:49Z","last_seen":"2026-08-19T21:28:06.085748Z","times_seen":7284,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/meanmenu.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.022Z","timestamp":1787148014022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/meanmenu.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3200\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11264,"size_decoded":3437,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"b1a78e15b45e0497c3299992222d138b","sha1":"a30da9f858a3ce2ab3edcf07706337d2ca32d9f5","sha256":"4594db563a574092ecd91c9f357af5a366bebf76ddb9d1f4e680d63eca02795b","sha512":"a4051d48db93666b1e84261b6f5c4503f9093e926ceefb8a8f3409647e004622796a8765cdc8f15bc133c636b0d8a16166aeaec908cc4e4106855880006eba11","ssdeep":"192:QIsVd+89x+N3UXr3/5gSvB93q2I6ktrquz8Ikb:QrVd+8iN3UXr51JGpu","tlshash":"ca3285e0f37c11ae95761464b02702fe34bf823af449aa167c79dd79309096912e6fe8","first_seen":"2023-03-08T02:15:23Z","last_seen":"2026-08-19T14:03:08.051306Z","times_seen":484,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/aos.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.023Z","timestamp":1787148014023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/aos.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 18 Apr 2024 12:54:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4224\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14243,"size_decoded":4461,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14243), with no line terminators","md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-08-19T21:15:18.397168Z","times_seen":11979,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/9qiNUIxPjxiwcwrLSbgk.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.048Z","timestamp":1787148014048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/9qiNUIxPjxiwcwrLSbgk.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3322\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3322,"size_decoded":3587,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"833c669f751d68331e0c1062137aa464","sha1":"2732fc308fe478b0e04cc0892011f3626d014b68","sha256":"074f958625cd12261378c4e3e678d3c5b9cde0eb5c93517ce3e9c01f50c0c931","sha512":"d26dfa35b2dc8fbc8622db678cd87af739a6edb7931d636e61f3bd32321612502aa691ba1bf8fdf7a5f0f74fc26d29c38a9f4f47fe875cfd2760f9844156d940","ssdeep":"","tlshash":"aa618df932908e91eba334f25e9c47ca0875678c11652b93b9b686113e1301cff4ae0b","first_seen":"2024-12-07T19:45:02.172108Z","last_seen":"2026-08-19T14:03:08.089834Z","times_seen":71,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/cashmaal.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.091Z","timestamp":1787148014091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/cashmaal.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39484\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39484,"size_decoded":39750,"mime_type":"image/png","magic":"PNG image data, 964 x 598, 8-bit/color RGBA, non-interlaced","md5":"8edb48caf964e3a62036b674caf5c99c","sha1":"c0cdfdb0c9469881f7a864aed8ea09caece637ce","sha256":"2b70fab8f0e1a65767767072c5be7154008b9240a319fca5582e15883a6aab2d","sha512":"f6aeb5547259c6779f999bf35f27ea98fa823ec9c589b390c6ccb386b67df42bb5682ed27215ab2c15b3a37cddc07df89d4373ae8da174124c454a538a48b3af","ssdeep":"768:FZG/XK1KLxdO8qa6eqUjKSJg/8ofB5X6b0cqjkAIKwNuWqIcdg2:FZGPAKLEaYmK6gEofB5JLjkAIKWqa2","tlshash":"2d039e89c17f5e2edb2920df7a97853c28491dee88d753220fde1225c818805bb57bf5","first_seen":"2024-10-24T21:44:25.843084Z","last_seen":"2026-08-19T14:03:08.134884Z","times_seen":181,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/twocheckout.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.099Z","timestamp":1787148014099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/twocheckout.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26276\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26276,"size_decoded":26542,"mime_type":"image/png","magic":"PNG image data, 973 x 151, 8-bit/color RGBA, non-interlaced","md5":"095be62ce17cbb9d001fdd6188261cef","sha1":"9fb0943f1ecfb21c6b00f920858df309c1e6d117","sha256":"4be98197c08165e1e48414bfc86902d7fdbfb2d1a6b245e263f5bb6d50fc158c","sha512":"29d91e040306957fe40ac0c8ad1f0ff856bf2bb412e0a6d62edc78d578f5f9fc8bc60637f85a208ca9a305bdb30dcc298b3ced258cae32c1d753b5ae10c0e62c","ssdeep":"384:A0pk4Jd5+6p0w6tvkje8bEXBa9sH5Hp/9XsQVyF+81My7GZ68d4zUqtfFQSip:A0CEa6p0wgLXBd5HpVsQUI8a5XdkXNip","tlshash":"9ec2beaa47343fcbe930c3416d0a8494963614cbf718b545ba6ca61eff9504ee67f803","first_seen":"2024-10-24T21:44:25.904172Z","last_seen":"2026-08-19T14:03:08.152132Z","times_seen":180,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets//front/images/bg/brand-bg.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.817Z","timestamp":1787148014817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets//front/images/bg/brand-bg.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 229538\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":229538,"size_decoded":229805,"mime_type":"image/png","magic":"PNG image data, 1567 x 623, 8-bit/color RGBA, non-interlaced","md5":"4efa24ec066deeb592640acd509e5d3f","sha1":"95191c6538f4d7503c72741e69b6b3d097aea058","sha256":"c858acf6ccf7b1ca85a0d1130c661676084d00dd7e233ed0e850187aa6749115","sha512":"73745ad75bfd4d389a7ad40f625257948cfd6303de9353e8b291338d9430a74d464f2d9ce54839899bf4b61256d779d684c2718d1252921920b04f41d5a55ad9","ssdeep":"3072:g4b/1BihrHikrHYBBlWR9Qs13jdFatv3A1UKJTkaRattcxv590HzLlUaKXY4/Oa:zb/jipikr4B7s5pFayU8R2Gz0HFUa54D","tlshash":"e824232d78134daac5da41ff050462a7b3390f17ee588b0829c5ec9eec2b49e39476f5","first_seen":"2024-12-07T19:45:02.327994Z","last_seen":"2026-08-19T14:03:08.050095Z","times_seen":56,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/css/aos.css","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.979Z","timestamp":1787148013979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/css/aos.css HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Oct 2025 08:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1913\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34865,"size_decoded":2222,"mime_type":"text/css","magic":"ASCII text, with very long lines (34865), with no line terminators","md5":"018ba5a451d673f25e95c4d6455b1a13","sha1":"42fb9cc74e849994a3ebf52d924cce0a6595b346","sha256":"91f52388c46d5ea2f158b297a3977c6db3d1587a962a3f8f23d7a07c67fdb364","sha512":"beaf712dec7b12882cf5d512ccb67be9000393beab661eb0ae11f30168b5e7dc282e6137501cf01aa6ddd355c73f4da3ef595668e70e1fd0dc5dd0862b27a129","ssdeep":"768:UjQEajydVjkowjgCWjSJfjWnnjAO2jAUgjaXVjKpRjMUkjweSjQ5lDjmjs+jQelq:UjQEajydVjkowjgCWjSJfjWnnjAO2jA2","tlshash":"7af20fa6b90da1007e134f0713cf2908d935b599e6301589ff2a35c61ec2de6b963fb6","first_seen":"2024-12-07T19:45:02.371649Z","last_seen":"2026-08-19T14:03:08.068878Z","times_seen":69,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/simple-notify.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.012Z","timestamp":1787148014012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/js/simple-notify.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2175\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7752,"size_decoded":2412,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7750), with CRLF line terminators","md5":"ad2bc46866970f4e3531b92b208311b7","sha1":"3f801f355fd60c7bb120f9848b2ae585be8ec4e7","sha256":"bf3b47ff379c977745be7afaff3e16addd26f5441eddd631297aed8f315f43e9","sha512":"38a24bea29c1915d580aa03558585def978871a283e7d7e4d009c2a690874bbbe9c51927685d9fea83c121f7aa5739e49f84875c764f101dd5b98a4441ff372e","ssdeep":"96:avJxHRh80fdLEgMu8FfMcVMr/jmgqYrVLowlBmsm/IGw9yatdkjr7f1Q6EuzYKNR:gnlPgFfMzAGowW/IGw998Pxrz3GQRgpw","tlshash":"89f14258f228243e41c7e49e506e4904a73e94b87584cd7c39adccfa5796ccce227bb6","first_seen":"2024-01-10T06:51:07Z","last_seen":"2026-08-19T14:03:08.075296Z","times_seen":361,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/Ffopm3Uv9nALAhOU4TSe.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.056Z","timestamp":1787148014056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/Ffopm3Uv9nALAhOU4TSe.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 11 Jun 2024 06:44:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 593\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":593,"size_decoded":857,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"b9b0e2a1d5c9cf1afc3f749ffd464700","sha1":"ae3639b97fabeca2834ae23efa17aa472cdd2caa","sha256":"32faa4f405fc485f388adfe0f0c717e3af89d2c9cc60dd7c6d9157679b8fa9ad","sha512":"120cb0c3b08cf6181176f42da09afa2196a54534c5f38041f7c3a14ee9903b6aea71dc5d89aebac36fcc6c922c10588f74b4bafb54f11d99fc7eed7c502691f0","ssdeep":"","tlshash":"93f002db12691b7bc29c4f9e3583165588263f7ab21f514d96f0c50c4834d909266101","first_seen":"2024-12-07T19:45:02.165714Z","last_seen":"2026-08-19T14:03:08.150458Z","times_seen":70,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/04C4SrC8P2fi2eXDpVYA.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.057Z","timestamp":1787148014057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/04C4SrC8P2fi2eXDpVYA.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5474\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5474,"size_decoded":5739,"mime_type":"image/png","magic":"PNG image data, 110 x 120, 8-bit/color RGBA, non-interlaced","md5":"9e395159e9b91a74d30581dc4a5d9c93","sha1":"e395717bca51336c1e6c714fedba4874cc7de0ec","sha256":"12fc44e4b9529c6b0a02186120bfd23cf6bfbf0b00cbe7f701380d34e6fecd45","sha512":"a6404e5c509a423e7336b337ff9b65365a34e117ddee64d199f91ac13f61c8724890ba83ce2c842ccf4b4606b18429a65856891da1c002f359ec215f1ff920e4","ssdeep":"96:WSOhqRa8Bqhz+vErJF0u6dAidGUmYvDzjoT6HnR26/PtGauigNhEh9ntrFQDvM:WSO8Ra8MhzPg3dAiClgcFDWh9ntZQA","tlshash":"fcb18ee51e426f066099896f8c7d3df68016e37182e637001a2a6a3105133d6c931ef7","first_seen":"2024-12-07T19:45:02.153917Z","last_seen":"2026-08-19T14:03:08.065549Z","times_seen":70,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/r4pbyZZg1B76DWZvEY5e.jpg","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.069Z","timestamp":1787148014069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/r4pbyZZg1B76DWZvEY5e.jpg HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30195\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30195,"size_decoded":30462,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3","md5":"5fc57c7df3795f58e6f4f6d6f6767514","sha1":"b73a923bc743f9e0ae369beb371eb38b2f7467a1","sha256":"82590d4547e6d8e2fb36c4a9b4a89d16106adeab2a7e577780f67a174d014cd3","sha512":"1283ead6023753e1c008784d37ffe59e8eca679421eadb5e564c617181085454d7e7609031d251250bba6cc0f588c057f041e3d4ee56b117f8bb9aed852dd818","ssdeep":"384:9wzXI8mrL/Gzqzm/RWT9T0AR1V0OTGcSypoDewFSloojI9+gwGkoCdKxTQE5B1kN:CzI8sL/bRZXDoa0Iuv5LGtX/Wc","tlshash":"e0d2e03ff702a3f4f00463f5a29c1b269970e9bcf9e8571f205419c96118bade3b9166","first_seen":"2024-12-07T19:45:02.202782Z","last_seen":"2026-08-19T14:03:08.116031Z","times_seen":48,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/bg/choose-bg.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.815Z","timestamp":1787148014815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/bg/choose-bg.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 182476\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":182476,"size_decoded":182743,"mime_type":"image/png","magic":"PNG image data, 1920 x 1163, 8-bit/color RGBA, non-interlaced","md5":"77fe27f1022206b01e5635ce698a7ab4","sha1":"0a5438db35043b61e8428bab8ddb51f45d459e59","sha256":"8f311b90ae2602d7f5b190f25dac458869735a83a60abf144bf4c1798f7e5237","sha512":"40dcee548f5219058d3455d26bb7beec2328a6992c8efc170e94427426a879249aa37a4439ac80fe6fa854454b97cb6da0582394477a0631839a46ec66405ec7","ssdeep":"3072:jucl/LLU1GZIiPXnNE0exwO7XpiQtVb72f9cgLCJXo+e5a/YzMX3QsB5:jnlD44XnNE0kw0iQtVPAvLCJYp6YzBsD","tlshash":"c90412ee84b3de0cde47057408fa4fb3e0135faad1e7e884c685c57c5252f982465a6e","first_seen":"2024-12-07T19:45:02.32554Z","last_seen":"2026-08-19T14:03:08.147336Z","times_seen":63,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/shapes/newsletter-mask.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.818Z","timestamp":1787148014818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/shapes/newsletter-mask.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6294\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6294,"size_decoded":6559,"mime_type":"image/png","magic":"PNG image data, 1319 x 253, 8-bit/color RGBA, non-interlaced","md5":"4e4c428026dfb38265ec2aa709a742a9","sha1":"152d94b546d0768416be8cb750bd36dea14277e3","sha256":"57db09d48444b4f855f474a32597bd2b7dff7bd46245295c990ae2367a1bcb0f","sha512":"812eb3383f7403a7f2ae48e4e9a7d5b0e63fea1b00551b3701c8dc65987fa1ff6bba46aba71c10f7c0ccc7493eb880cfa5ab2b8e1d18796375f7591c0924d209","ssdeep":"192:JSEyEEM9LAgAbqKx9iN1AaYaUSt3pi8+Iu7wehRr2C:wEyEEM9LEbif22t3pVgP6C","tlshash":"c7d159e726e6cf19998cc814311b0e66380ea03f611df87c12b9f13981f5cee4d9922e","first_seen":"2024-12-07T19:45:02.311822Z","last_seen":"2026-08-19T14:03:08.155804Z","times_seen":62,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/lucide.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.837Z","timestamp":1787148014837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/js/lucide.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 73457\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":328731,"size_decoded":73695,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65361), with CRLF line terminators","md5":"0b26c4825bcd6612f66346b35e0009f3","sha1":"f4f140ef2664821d2021e72ab523b4d1028215fc","sha256":"5f400c8bdf2a488952ec4b6df4b4d54171ade6fb9651a966ee4d973f63e05f4c","sha512":"8eb406e1af70ef5f1f3bdde08d3aa452ff7f199d81b60279d69b75f953b4fc2127f19c396b3f7d1890c93df9114494f3223420191511413a0d8357e612e6c93a","ssdeep":"3072:OlXuOlDhrEYDPjvkY1MJdBI17qg0PO4LfTjt5z10zj5C2fwcmFTgdxkNLg3IbZGa:CMYCff12RQgdYLhbL","tlshash":"776496afdfc9160f496ae3881a47b0121fed63be370a8c12768ed537e155816dcb3621","first_seen":"2025-08-04T12:09:10.989886Z","last_seen":"2026-08-19T14:03:08.096606Z","times_seen":34,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/css/bootstrap.min.css","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.970Z","timestamp":1787148013970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/css/bootstrap.min.css HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Oct 2025 08:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28317\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":232953,"size_decoded":28805,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65338), with CRLF line terminators","md5":"0fc647a071a2616fe24e9b126a52af24","sha1":"af23b5e2fed2cf85f3eeff149cb7fc1b382db1ec","sha256":"a4c123551432f10a965b8a9f706d3a8f9ed36e1564620f520de64cdf5bfe6dc9","sha512":"91dd95e4101e4aee9a649397bb2277b5b4350b6208c90dcbf2c3178adbc8c88d255187ed2545c43b7e3802cfcb9a4627470546931f9debf228a8f7e49ce4cecc","ssdeep":"1536:+9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41q:hnIw98fsV986I6V6pz600I41q","tlshash":"313482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2024-03-23T16:29:32Z","last_seen":"2026-08-19T14:03:08.147861Z","times_seen":393,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/hDDTTddCaKUAH0hPgKkE.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.035Z","timestamp":1787148014035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/hDDTTddCaKUAH0hPgKkE.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5474\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5474,"size_decoded":5739,"mime_type":"image/png","magic":"PNG image data, 110 x 120, 8-bit/color RGBA, non-interlaced","md5":"9e395159e9b91a74d30581dc4a5d9c93","sha1":"e395717bca51336c1e6c714fedba4874cc7de0ec","sha256":"12fc44e4b9529c6b0a02186120bfd23cf6bfbf0b00cbe7f701380d34e6fecd45","sha512":"a6404e5c509a423e7336b337ff9b65365a34e117ddee64d199f91ac13f61c8724890ba83ce2c842ccf4b4606b18429a65856891da1c002f359ec215f1ff920e4","ssdeep":"96:WSOhqRa8Bqhz+vErJF0u6dAidGUmYvDzjoT6HnR26/PtGauigNhEh9ntrFQDvM:WSO8Ra8MhzPg3dAiClgcFDWh9ntZQA","tlshash":"fcb18ee51e426f066099896f8c7d3df68016e37182e637001a2a6a3105133d6c931ef7","first_seen":"2024-12-07T19:45:02.153917Z","last_seen":"2026-08-19T14:03:08.065549Z","times_seen":70,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/bHAQ8xgRCyiJtSkVFRiI.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.036Z","timestamp":1787148014036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/bHAQ8xgRCyiJtSkVFRiI.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 116519\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116519,"size_decoded":116786,"mime_type":"image/png","magic":"PNG image data, 359 x 168, 8-bit/color RGBA, non-interlaced","md5":"5d01992249f520453e9a74598d73a3ca","sha1":"18f2cbdd8416f84bbf24bbdbe451a9b47c519ebc","sha256":"70105a722076d1522daebad4a324881d70a2f9bab82b5cadc9dedd779c626c0b","sha512":"559998738d98b96a3c5cbeeb854a5dff9809cd0c8a2cd24881d1ec2fa4ea4db0d6bad2d7040a5ce0019a1fbacfa03276c9cca91ec28cab4c24756ae9c8bfc8a8","ssdeep":"3072:rTyF/ACCiWMWhGBvFGSCzB7NRxd5Bl0XITnlDcbT:rYPqMkm9IlZd5BCXXT","tlshash":"f0b3123a481633fe207e9078152ee75489f86c25e1cad07c76c4b79f38f9f998879015","first_seen":"2024-12-07T19:45:02.262625Z","last_seen":"2026-08-19T14:03:08.118693Z","times_seen":62,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/features/features-shape.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.044Z","timestamp":1787148014044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/features/features-shape.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7637\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7637,"size_decoded":7902,"mime_type":"image/png","magic":"PNG image data, 151 x 165, 8-bit/color RGBA, non-interlaced","md5":"548590e2471d7cbae4a86549e285cc59","sha1":"cccd546d0843ad966fe74ff4dccafa20c90ce96b","sha256":"d886bac08066330966df8d03c6f10065cfdbc3ece42129a2da16f0dbe85806ed","sha512":"1161e7554cd412b014f5483116aa0834217eda38f4f3f161796b977d58e402277b14e2ab9cf7e6c162deb8b9f2ab988aab5db6364c0af1bf4faf13fd8b33b8a0","ssdeep":"192:bSgtYuBzqMAUb/EY97XXYnKi7r2TK9hykY9dcgGG:OgtYuBOxK9rYn57qwYkYRGG","tlshash":"52f1aedc6ecce9face492f3464e27a58f6071cf94d87291a3a202d51329ed2901468a1","first_seen":"2024-12-07T19:45:02.157995Z","last_seen":"2026-08-19T14:03:08.113741Z","times_seen":66,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/GIv0ZICbO5mZ910LTMcO.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.067Z","timestamp":1787148014067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/GIv0ZICbO5mZ910LTMcO.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 120557\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":120557,"size_decoded":120824,"mime_type":"image/png","magic":"PNG image data, 927 x 721, 8-bit colormap, non-interlaced","md5":"f9a8aed7e6337080bb20aecb05c7d28a","sha1":"055a7ab21e193d8d567219f68b46d4fdd44fbe68","sha256":"f5d7719decf7ac666b9c8e60cbf13d0eec2c99a86c34b9d2619d0f2bb1fffed5","sha512":"32f3cca17ec90f8e33b2b33e2d4e9484d2580811945c905d21435e942e88ad57d0be9709281d4df028d208023903a054d50d35f8e6152d7218994b46991c182e","ssdeep":"1536:Jp2oGx7brQlcdhXe1CZJ3LRjiYtZUMocqk2EMX6x0xsC/SsUbHHU76DTGILSRJdn:2nx7bKcdIq7wAsK2vNsC/dWHAVzh","tlshash":"37c3120f149d16f0da60687af152b5d586c92433c856b462b22edfbeb0a378363f1bd0","first_seen":"2024-12-07T19:45:02.281174Z","last_seen":"2026-08-19T14:03:08.115529Z","times_seen":68,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/paytm.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.096Z","timestamp":1787148014096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/paytm.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7504\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7504,"size_decoded":7769,"mime_type":"image/png","magic":"PNG image data, 675 x 225, 8-bit/color RGBA, non-interlaced","md5":"6be8af4af6c5c85b19599d0e62428b7c","sha1":"fe41cba7af1bab2992a29673298596a72d50f824","sha256":"fa816f9adc5494b20bd1d42dde2a740ecf907e3514f3a3ffab3f680fe0e80256","sha512":"10f7bb74bccec502b0b28bc4f580950d7b5074f53d7e2224fd2ed686185e666d339ba6c799f58e9dccb088b6a9e01d3bd066b98b529333000f132b7d1c087e56","ssdeep":"192:m1S0tKg9E05TatIPE6uMjGRHtd9zyFzLk:mTXE05mtIPEsjGRHtd9mtA","tlshash":"d4f1a097be5076ec7b9c71914acf234cc1359214b0a66638e6e43acb1941e4b5e71426","first_seen":"2023-06-18T12:40:21Z","last_seen":"2026-08-19T14:03:08.138933Z","times_seen":197,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/css/styles.css?v=1.3","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.982Z","timestamp":1787148013982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/css/styles.css?v=1.3 HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Oct 2025 10:05:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 33216\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":291169,"size_decoded":33526,"mime_type":"text/css","magic":"ASCII text, with very long lines (613), with CRLF line terminators","md5":"3d6258133cf946e6dd8bc634d24be35f","sha1":"b93e98a7748b7e127fc37e00a5cbb1a4f835047e","sha256":"8f9e885dd9a2e1a9e9e07d722bb6c902092b0a2fb24e1749c7dfabcf42e0a85c","sha512":"1e2287cb38c50003503ebdba555f86bcd849220ff3f73bd5255a82e2e615c3163a738b130f4d71d0e42def3917c60f9c70242e433ef188f5478acb451425b9f4","ssdeep":"1536:RS3vn+tgoduIFprGdJTSIXhRDZx+yt7wO31KegCwszeEsuIALcl:8ljC","tlshash":"2c5440a89e4511081776d77abb913a14ebee8065eb0603dd7af1600c63ce39a517efcc","first_seen":"2025-12-30T04:15:47.008739Z","last_seen":"2026-08-19T14:03:08.040423Z","times_seen":12,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/jquery-migrate.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.003Z","timestamp":1787148014003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/js/jquery-migrate.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3177\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9035,"size_decoded":3414,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8892), with CRLF line terminators","md5":"7064515a0f8915413e32010fda1d9cdc","sha1":"f333e43933d08da12a0101237626437c57d04ec4","sha256":"9a36b3ce2290685e4a6ce2ecf336383a07b665c818ac29a703a290c74ec43872","sha512":"66f87beb5c1a87cf6929e2a8cf036ce332e6dd5afc136c561eb673f3348ebac71e521007f67f21db2a0f8a7fd2b3c5344d40efd71462cb577a64b4181e6a7b1f","ssdeep":"96:5m3UrDAWhTAETMu3QXveMIIa8JdFFh7MyAgxr3KFBF/s++EHzDFvsiMAoe:5mkrDNhTeeMIIa8J/Eg96DBs+hlke","tlshash":"d212b79d7156b9764ff77678f03f839b727209d929098a00d26cc9ea342cc59813afb4","first_seen":"2023-03-13T01:40:03Z","last_seen":"2026-08-19T14:03:08.128724Z","times_seen":50,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/AQKWkBIEIMqe6r0RtH80.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.030Z","timestamp":1787148014030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/AQKWkBIEIMqe6r0RtH80.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 18 Jul 2026 18:04:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 538670\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":538670,"size_decoded":538937,"mime_type":"image/png","magic":"PNG image data, 601 x 602, 8-bit/color RGBA, non-interlaced","md5":"6ef0fa0b60f9b4dfb8a426e016deb81e","sha1":"aac933bf7d418c9b1caff11441a87fd8c0323bfd","sha256":"59a829a2eb18cb74212dd7f4acc3838abd9115455aac133607d650efb18e994c","sha512":"ab4e6a36e0bf6b8a3548e4333696a7c576f4b54e5c93f8cea8c95d14fd6ab9164df479af54a1a1947c1a5f4bbee46ca170b2334ea5dee63a326cca2ec57e6aef","ssdeep":"12288:SbPWoMseNPRkzj2PmrUKdi50qM6RKeZYrv35VwL99LB4t1Y2:SKoghK3ZdiHTDYrvML99LB4tW2","tlshash":"99b423b5c8b69ea0ebb937de520b58fbf3b45d74271843887a31409f039e6078336569","first_seen":"2025-08-03T21:52:39.288823Z","last_seen":"2026-08-19T14:03:08.103319Z","times_seen":17,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/aascJDBaVaBNOE7ulnTm.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.042Z","timestamp":1787148014042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/aascJDBaVaBNOE7ulnTm.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 114344\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114344,"size_decoded":114611,"mime_type":"image/png","magic":"PNG image data, 359 x 177, 8-bit/color RGBA, non-interlaced","md5":"fa793f48e25630ab2307cb88718d4c79","sha1":"b641e7af71b71dc046d9fba0a66b3a7c97a6d109","sha256":"058adf1ac3154bc8133f6896fdbed5e89765f6e526d05e2233442e1047283853","sha512":"7628502731ca98c77deeb2250afa00e28438ea24dbdacaaf47bec21f417dea4401694a40783965d6b36d715345cd187ef60aa95cc4586b5b2a746d213b3b561b","ssdeep":"3072:XQVbq9Y7/QfvCrxR/R9pmLBznLDn28WBCWeyxh3l7:X0bq9Y7IfvY1cFzLD28sh9","tlshash":"5db31209c54334187f67a75663463ca12a7c8a2ce5c1c830cd65aacc9135bf993d8efd","first_seen":"2024-12-07T19:45:02.273314Z","last_seen":"2026-08-19T14:03:08.05233Z","times_seen":62,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/DI46TIemizLYTKwKuSo9.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.055Z","timestamp":1787148014055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/DI46TIemizLYTKwKuSo9.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 11 Jun 2024 06:43:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 890\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":890,"size_decoded":1154,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"3d324457f3f4aafcf1d9d2db9bb21840","sha1":"9a5a86f79ed8de841c9fe21fa881687ed6e5bce6","sha256":"beba7fdb0ade03f94e82a3c649f038571013ac4a3921d32eed2d837c61189f33","sha512":"7da764a555b253d44d5ff8616d3fc103c519d3eb44f59f21b4951a4f5aef2b1cc4d99bc677e87ee1817212810b7443c4cd15714cf45a2bee955fa3eb4436e66c","ssdeep":"","tlshash":"d911e6c67326a1fef40003ef73c52130f83c288ef50a1d006ac1f9a1d11a096b0874e5","first_seen":"2024-12-07T19:45:02.163765Z","last_seen":"2026-08-19T14:03:08.093201Z","times_seen":69,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/kfLFG4L0iY8GyNqQDz7I.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.064Z","timestamp":1787148014064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/kfLFG4L0iY8GyNqQDz7I.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109936\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":109936,"size_decoded":110203,"mime_type":"image/png","magic":"PNG image data, 690 x 690, 8-bit colormap, non-interlaced","md5":"7441faa73fab9084a0ab9431c5e4c567","sha1":"ed9392b2cc38f9edb4eb2b0bec1b3cd4bbfd3724","sha256":"57af7d600a35b2dcf76a8442ad952a65f201a27384ff75f8feea299dae242246","sha512":"7dc76c1f793a14c0d334a5b218d2e99c1df5acf724009590a951850f674730fba06703a93d7b68cac70bdebf0d2ba39b5c02cbc30d8dc74001312ba0a9a67f8b","ssdeep":"3072:+6qhsFLzYRraMICIInepSvEIAiHfMC4gJk:+6qWFLUBaMzIImSMSHfMdgJk","tlshash":"6bb31207d923e2dcf460246cbfc6614c5bfd7b300a8e97c38e6f596923aa1457a5f482","first_seen":"2024-12-07T19:45:02.27738Z","last_seen":"2026-08-19T14:03:08.098411Z","times_seen":61,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/voguepay.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.078Z","timestamp":1787148014078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/voguepay.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15005\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15005,"size_decoded":15271,"mime_type":"image/png","magic":"PNG image data, 672 x 146, 8-bit/color RGBA, non-interlaced","md5":"a6e9640fe0666fbcf0f4b86bc98c57f2","sha1":"a27c336f7744571f417d1ee7441e3ac72a632347","sha256":"9d1ed8b5ed2556a0818326d9d6f32a1af21f6ba662e34f64f7b22ed17b1a3989","sha512":"8fee71f5ac515d7158ad7fe6a4362b4cd0de64da53a0b2d7d0df6e38eea1f22b9cd33c5e1c2f8a8078c72ceddd992ba6fbde7c3214045de1c87289bdc48646ad","ssdeep":"192:OmEBZYL9TM8aFFS5b9Zo0Mugx6Iq9sXQ3OjTfkGTtU6Nx4X0VOuxbCeFxv66t5uG:Ons9XRjZo4dn3ybpRHx4EXFxv0G","tlshash":"b662ad9a614807309bf8fe721507aceae84d72cb711f49187b961bd328f367c06d5a2c","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.094829Z","times_seen":237,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/paymongo.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.088Z","timestamp":1787148014088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/paymongo.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47149\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47149,"size_decoded":47415,"mime_type":"image/png","magic":"PNG image data, 1200 x 630, 8-bit/color RGBA, non-interlaced","md5":"c42bd27487fdfadf5b5bbf35d7b7390b","sha1":"406fc929aa131a6d065dce6ef502d9b5e9467719","sha256":"ca45a8b080310619d0d49838cf48ec0ec92c0a0c346733bba0c6c54459077b73","sha512":"e91d503028ed590252043afb5e768e31132aa131a4708712e16fcb265b71a01c54632f9f90cb86f8543318bc4896a53b747d9bdba03dc4b2ad5518793aae3cdc","ssdeep":"768:Arx9Sw4Soh+W6ZDmtq2risvY0j8/0eDQTjHYlwz:APoJmDWrzA0j8MeDQTjH3","tlshash":"d7237a57cc84730f18687a4a43af79e2f5b0699b34691f8f1f8886321e076d1f271e1a","first_seen":"2024-07-17T00:16:24Z","last_seen":"2026-08-19T14:03:08.151649Z","times_seen":215,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/icons/moon.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.029Z","timestamp":1787148014029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/icons/moon.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1854\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1854,"size_decoded":2119,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 16-bit/color RGBA, non-interlaced","md5":"5e0db5c8ab44d8bc91c192fc6f90eccc","sha1":"87bf7eb6189f22e4e4021f91d770041543d7f8c6","sha256":"eb20c35247f6b4c789c16105d69c5aa204c6d9a6cded37e7536d55df23663c82","sha512":"bf83252d47f34f00683ff114aab9b2f56d15cdb0823519ca9d7100a403a5b3dc5c91580f3ebc2ec252a0bd2aadb11bcf240e6e574aff851f0d9f2de144f67f68","ssdeep":"","tlshash":"ce311d5a51256c24715ecd1e108714f77cf758c53a0633170b3ed559656db24702ff71","first_seen":"2024-12-07T19:45:02.150166Z","last_seen":"2026-08-19T14:03:08.060645Z","times_seen":67,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/2rBHfTIE9QZxOch925i7.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.046Z","timestamp":1787148014046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/2rBHfTIE9QZxOch925i7.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4020\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4020,"size_decoded":4285,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"8dab2b88edc63048df4211e23df588dc","sha1":"adc8bbcf00da5a1566052ca4d091e25977c97e82","sha256":"780b651cb371f204756dc4511097bb86281f8d5e76465691bfbd0ff8f2718c6c","sha512":"0afad2ef11c6ec725fd65a640e948eed4ed9415cac096fe4a436d74ad477ce1c9b89564ca24046d44e81a93f6c9f14d1126a89290d0ae93ef3a5daf1b3e5e625","ssdeep":"","tlshash":"3b816ddd31ca8f7e3b15a913d278442be16e3259faa2e5ef047a521a2b532112345cc9","first_seen":"2024-12-07T19:45:02.167702Z","last_seen":"2026-08-19T14:03:08.076112Z","times_seen":71,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/cryptomus.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.087Z","timestamp":1787148014087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/cryptomus.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4053\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4053,"size_decoded":4318,"mime_type":"image/png","magic":"PNG image data, 245 x 59, 8-bit/color RGBA, non-interlaced","md5":"cbeb740f7ce95637a100ce8d17b3e055","sha1":"136c3e981a6925b607b2a38f4704f7a242b818f4","sha256":"36e68f3663ae70b1e07d59ded2060bb13e2ab60aaef3aea6acfaf285e2ea4918","sha512":"b46d2c1352e90f703775535b35f00c329325f3c2372b1b92b8f4c7505253cf570fb9cf6a24b6f4665518c6c3aac756f643cdae4d32000872f2bd714851e0fc9b","ssdeep":"","tlshash":"bb816dcf241b2624a0474a175c9311f2fd8645c4eca8e2c8bb8e26a570ae79071bc7d7","first_seen":"2024-07-17T00:16:24Z","last_seen":"2026-08-19T14:03:08.056331Z","times_seen":218,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/blockchain.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.093Z","timestamp":1787148014093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/blockchain.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 81732\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81732,"size_decoded":81998,"mime_type":"image/png","magic":"PNG image data, 2400 x 2400, 8-bit/color RGBA, non-interlaced","md5":"66ae1c151ad2209e26f671bb03b8a4dd","sha1":"2a34ab93b9279bf435211a5dfe9ee9b5848fff2b","sha256":"52a55abb1ede73a1f63966d9be25789c50325f1c0856a529197f9e1904cb56ff","sha512":"9cd5f8f24b0d8f453c5f2530d24923bc404cd643a7791e47dba0078381767215c197cec453279e13687f940440232ecf9214e1cd9251bc08438b6e729cf3a067","ssdeep":"1536:odQ5oLRK+1Zh4+s32jQwNlJlG7Eq+f4xhtkEnmkwfkb0VDyK8QQAtgs:oYqRVY32jJBcYKqEnpRb2+wd7","tlshash":"1283be3d9c656d29d27828338c2e07f8b5f94ba52c566e51632a8c34ecc66ed7813cc7","first_seen":"2023-06-17T15:42:12Z","last_seen":"2026-08-19T14:03:08.14554Z","times_seen":217,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/fonts/fa-regular-400.woff2","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.723Z","timestamp":1787148014723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://nexaglobalfinance.com/assets/front/css/fontawesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 418952\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":418952,"size_decoded":419220,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 418952, version 773.768","md5":"470b611bf46c0f76db76ae0d76e7187a","sha1":"9e14455b02f041d645d4bb21ad36ea7815c232af","sha256":"9ac06ddbf9e71000fb8f9af22735a9d38de31bb12b15410f060c95c05ffee249","sha512":"e9bee60a7d4a97447595f6dc5be3ce20a670c659a5839f4c467f37dd57b1206f30044253725caca273a8d3750c6b1f3aeee6a81a1f3b88d7bd99a5194625cb01","ssdeep":"12288:1Zj50dgknDM10xI4ExZAVW5hS9DRsWMOV4:fpkYaKA8hS9DF6","tlshash":"9b9423f331e92fab1ede54e131dac851a0e35045492b031de80b7f96bb698322ef9315","first_seen":"2023-12-29T09:06:18Z","last_seen":"2026-08-19T14:58:05.356549Z","times_seen":2057,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/css/swiper.min.css","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.981Z","timestamp":1787148013981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/css/swiper.min.css HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Oct 2025 08:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4672\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21064,"size_decoded":4981,"mime_type":"text/css","magic":"ASCII text, with very long lines (20795), with CRLF line terminators","md5":"18a6d413b3269aff06654c5e821c09f1","sha1":"22762ef42ce86cc0a52a5fa1b1f512ca1da34c0d","sha256":"19b248c372c9ef4b19540dd12f81869b118024e33517de0c097b521f7e10231c","sha512":"c8758c29d247f6a2ba038a837ccb2ea011f70acbc8d788e883e83dd335d65e25776cfbf2dc08bdb596cf0c11e1b07836b300f129f862a5cde159961e4853904d","ssdeep":"192:Yb4mUJbiKneT7Fmk0B7xP5Tanxup/a2uMSf5jfcpqesseEPJ9QzPz+c3At2/g:YtUbeT5mk0Bmnh2u9f5jcKNmb","tlshash":"b59255791340291762274f2647e58bb4da74c4930b938aee62c0ad48c7b7dba235f397","first_seen":"2025-07-23T06:55:03.711565Z","last_seen":"2026-08-19T14:03:08.102066Z","times_seen":69,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/parallax-scroll.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.021Z","timestamp":1787148014021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/parallax-scroll.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1829\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8929,"size_decoded":2066,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"561cdc1a6dd173750e007c678385208c","sha1":"7b235b228eb2d084652307e68779e3a0863fe692","sha256":"6f190f0c4efea59a0dcea69c2d855e7cd37c56e621a506995654604d7a4e422e","sha512":"f236722f63817fcf59c9d98f1dc59faef985ddb79a89b03e7e04af493836ca9527ac1a877b0baca24a88b1fbef8604cd7a518e241162e9fc0a241fb6006771ac","ssdeep":"192:3tVmEaP3FCCCqeekidblijli0K+/g+67PzU6kB0g6:7Hq3Eqeeki07iP3","tlshash":"47022004e4a30521d5e771358f5e024ab72eb51b82a5d928bb0ddacd4f8093493d8ff6","first_seen":"2023-03-08T02:13:11Z","last_seen":"2026-08-19T14:03:08.07304Z","times_seen":500,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/oqIRKRFZkGnhySsfswW1.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.050Z","timestamp":1787148014050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/oqIRKRFZkGnhySsfswW1.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3801\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3801,"size_decoded":4066,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"9b4d07b88b10096ad0139d9710394da1","sha1":"16784e20ae0534a9567fcb5af31724ee587f01fe","sha256":"7afe79e4d261a0caabcb23c3d5b4cb8df027dc7068e2e7af33f16f4a283cf279","sha512":"45bfe72063af7b20236d0724deff17cbf6447a44a316d38373d06df27669ae8a2caf3ab587ab586220681e7d079685a26cf67858a8c6fed420176b5594c759b9","ssdeep":"","tlshash":"2f716d8fbe021e7c870d77e841b72d3777fc95a992d4ee32eb74e7199c69a600016510","first_seen":"2024-12-07T19:45:02.174198Z","last_seen":"2026-08-19T14:03:08.114926Z","times_seen":69,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/blockio.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.092Z","timestamp":1787148014092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/blockio.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3581\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3581,"size_decoded":3846,"mime_type":"image/png","magic":"PNG image data, 300 x 100, 8-bit colormap, non-interlaced","md5":"dcc083faf814880da492a211d8442202","sha1":"d96723ec2df4e989f43d801e3ffec26bcf3f7e97","sha256":"eaf432be4f2ad0000b899d6066be3bad79178a0191e0d9a9693ca837f390c241","sha512":"48477f96ade70e1d4485e196aba3158c910ff406cb33e66b654f1b1488518e79394bbb907da498d632866853a480263aecd1f6ab26f0d1a2f908aad2e10795cc","ssdeep":"","tlshash":"d4716e9064dd0367529506fe1515ccb19b1d528ce71a5a1132a555a0c53282f06f2ede","first_seen":"2024-10-24T21:44:25.941136Z","last_seen":"2026-08-19T14:03:08.118053Z","times_seen":183,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/select2.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.009Z","timestamp":1787148014009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/select2.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 12 Nov 2023 15:02:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18644\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73163,"size_decoded":18882,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64127)","md5":"7c98b05dd4f3d7c693eb34690737f0d8","sha1":"6de10e74a992fca15e803d910d130f826631cb86","sha256":"f7244fff610595b944f76bf3080d74e3af42b5dd234f8f079e698cc39ac966b0","sha512":"e0cbdc1f071ba972941c1e8bc7765be4210056813dbbce2a37e65230ceacef3f08789ae2131ad5dcd0f9cd1cdef66c4d940049ea4f3ae0ffd597c9b449ddc3b5","ssdeep":"768:eLrL0yRTkmazJCf2B0eeKuWBcsGookOlxN3/fq0ZtjTTYovuYE4kpxcWQiIsoT:eQg2BneK38kOvBpXc9ST7","tlshash":"5c63b75c7a537231026f20e635ab140d22376b3e600a5668b068cded6dbec15736bf7e","first_seen":"2023-03-07T01:23:49Z","last_seen":"2026-08-19T21:29:28.704401Z","times_seen":8846,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/jquery.nice-select.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.011Z","timestamp":1787148014011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 May 2016 13:32:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":1166,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-08-19T19:26:03.146031Z","times_seen":10713,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/N1uC2oRBJUdKPtg3G6mG.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.031Z","timestamp":1787148014031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/N1uC2oRBJUdKPtg3G6mG.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 18 Jul 2026 18:04:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 539804\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":539804,"size_decoded":540071,"mime_type":"image/png","magic":"PNG image data, 601 x 662, 8-bit/color RGBA, non-interlaced","md5":"252a5aea725fb7a860ddbb6cdc74c427","sha1":"464418f76aa1daf10bc01f2eb7ba144a4cb3ddae","sha256":"f06c55369ee3009a9dd8f63f0ceb2323ef786fc3d15c9c37c4f471f12529f314","sha512":"ad446c94f9226b36e5e4de4f192ab2065696207273642a37a05e5845372bf1d83ed2dc3f92ca9e86f504ab99d1b378aec3838c7e10fe98d7f14fa72151c48c69","ssdeep":"12288:I2BLsgKRV7gNOLRTDAIDjhPJumks/cH8mZo+Iz2paj:Z9sgKRVsNohDvtPJaH8mOz2paj","tlshash":"2cb42327d4da9cf920b3f7dd1d60d7daa36da2ebb2b5501c3f889db2013ce240446a16","first_seen":"2025-08-03T21:52:39.348589Z","last_seen":"2026-08-19T14:03:08.155008Z","times_seen":16,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.720Z","timestamp":1787148014720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nexaglobalfinance.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 07:54:01 GMT\r\nexpires: Fri, 13 Aug 2027 07:54:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 540373\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":28049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-19T21:36:58.22526Z","times_seen":20655,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":21,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/5lZId2ijYLif4pFuUMwF.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.988Z","timestamp":1787148014988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/5lZId2ijYLif4pFuUMwF.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 18 Jul 2026 03:20:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66248\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66248,"size_decoded":66514,"mime_type":"image/png","magic":"PNG image data, 247 x 316, 8-bit/color RGBA, non-interlaced","md5":"c33241130e0512953634d926ae7ce381","sha1":"305506a109b2f4cb26a5191ff6301115bcce4ebf","sha256":"50d512eaaa4017b8dbe9e20650c4c27e1e3fdd8a7184be971cefa66acc2959bd","sha512":"0c2433232c74905626220f9e3238c0d12945c952fc725d367b9f860597a7cd6e2877659a95d67487f41a732f06738a0ff1f1c46b9733672f4196689a2ee08dc1","ssdeep":"1536:MSdgyoW84B6hT+bUz1zP9oWyvYSiBdo49USoQ6AJfUWJGhNGgkZ:pmyouBQT+bUzLoW7SydoGUxoyWJx","tlshash":"885302a9f76745617ffd4b019fb8880bf9a5f40cb23f2358d9981942466f0cb40f6a84","first_seen":"2026-08-19T14:01:11.252981Z","last_seen":"2026-08-19T14:03:08.101385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/lucide.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.006Z","timestamp":1787148014006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/js/lucide.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 73457\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":328731,"size_decoded":73695,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65361), with CRLF line terminators","md5":"0b26c4825bcd6612f66346b35e0009f3","sha1":"f4f140ef2664821d2021e72ab523b4d1028215fc","sha256":"5f400c8bdf2a488952ec4b6df4b4d54171ade6fb9651a966ee4d973f63e05f4c","sha512":"8eb406e1af70ef5f1f3bdde08d3aa452ff7f199d81b60279d69b75f953b4fc2127f19c396b3f7d1890c93df9114494f3223420191511413a0d8357e612e6c93a","ssdeep":"3072:OlXuOlDhrEYDPjvkY1MJdBI17qg0PO4LfTjt5z10zj5C2fwcmFTgdxkNLg3IbZGa:CMYCff12RQgdYLhbL","tlshash":"776496afdfc9160f496ae3881a47b0121fed63be370a8c12768ed537e155816dcb3621","first_seen":"2025-08-04T12:09:10.989886Z","last_seen":"2026-08-19T14:03:08.096606Z","times_seen":34,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/icons/sun.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.028Z","timestamp":1787148014028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/icons/sun.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1668\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1668,"size_decoded":1933,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 16-bit/color RGBA, non-interlaced","md5":"ae9f0886ba3dda0b58569499d73063e9","sha1":"0f5b744a8dfb223e956e01015a4afb3d6094140f","sha256":"3d25f0b260d3eb84346369575e0a76036b3ed8110efd90e58f6583c00b1df861","sha512":"1e34f9e804a7e01828bc1ae11a0d97a18fee818851e2dd89fe8fcf9262a44237db83eb7c4be452fd005453bcd08df48033ed5ebe4adae78511c15dc7aba6fe28","ssdeep":"","tlshash":"be31faf78480490fdf563339070ef286b8ed750d51b676864d3963bf1874f020188352","first_seen":"2024-12-07T19:45:02.147829Z","last_seen":"2026-08-19T14:03:08.102685Z","times_seen":67,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/GLRah80jBC7BLHcBU8VD.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.038Z","timestamp":1787148014038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/GLRah80jBC7BLHcBU8VD.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91111\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91111,"size_decoded":91377,"mime_type":"image/png","magic":"PNG image data, 359 x 177, 8-bit/color RGBA, non-interlaced","md5":"09a5b78e0475c221fb024e7932f214ea","sha1":"2e66a1a8ca096fec97f97e54824c2d3306de60a4","sha256":"32b4d2fed08584e66ac2273bcac911a415cfb6716a3552b6bc1f4be9e44953cb","sha512":"00972a0a2c8ef10d9381d1c9183a2da03248ecb8d9e3efb85f66301a0bd3e045e3dc0aa35b885d1ca500a5d0e9b430a86f44b94f57158e2959ef3dddac008247","ssdeep":"1536:Qd2bm+I6SSys/LGG6sSvMrEACO/45yyzn7Dz5AqauFo+mr6dsMzz6j8:Qd2bJIBStTsbvZqz+mesHw","tlshash":"3d93129ff8fb5ba48477a57f567bc810770c6b602d01795fe29202b86a4df248ae4017","first_seen":"2024-12-07T19:45:02.267074Z","last_seen":"2026-08-19T14:03:08.104529Z","times_seen":63,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/mollie.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.073Z","timestamp":1787148014073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/mollie.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41032\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41032,"size_decoded":41298,"mime_type":"image/png","magic":"PNG image data, 2400 x 696, 8-bit/color RGBA, non-interlaced","md5":"e4c7eb0f6ba7061cc492e178fe44d1bf","sha1":"9066247f84245e360349c6a6a86af9cfb8b6a6c1","sha256":"ef2df8737aeb90ab9173e766806dd7b33c8875fcd89114192a62a5a19c4c2efc","sha512":"b62f0a8cbf35f544798c6481cf57ac87e36e68bc04735ef22ed09839b8437ff9cd3baca9420d02ac81e0e4d821bafd34366d279477b994bc8c20ca5041b1340e","ssdeep":"768:BkLkEkzCj8u8848j8u3RG2BSygkg+pV3CG73rNeGP3aeLzIP2+scJ2Vl4/8nE3H+:BUkVz/2BKFK3B739/FPy2+shFyHpFaH9","tlshash":"8503e1385e76ecd6d3dcedb0a13a8b2472fd15bb1268d2e761f6c436da18247b403941","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.117043Z","times_seen":237,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/css/nice-select.css","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.975Z","timestamp":1787148013975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/css/nice-select.css HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Oct 2025 08:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 935\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4145,"size_decoded":1243,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b83506d101e8a03948d5c01e83da2b8e","sha1":"f0e5a025dad0105854bc1749d135ac2edabe24e5","sha256":"4532cc2e039d03064c8175eb9f897c312eccc1533c18b03f688bac8b40967cda","sha512":"e70b0c5c9d6a5f355dea7a19105a60188a22c19186bdcf013d6c008d6c6d51fd4634f4ce35f8a319e6f184f9d65f6c08453cdc899101407fe306e209bc5b1159","ssdeep":"48:McpRfkPCWGokjJ/VP6H6xf6pWU3IfiuB33SVXF6DbR8A7WpsBTkxstQE+feeG89T:LmMPSaxiZ4FiZFMUsE2i1pFH","tlshash":"bc81ee2ad7005142503a877fefd3aa18e7398143a52206acbbdd86074f3d95c98a5f8b","first_seen":"2023-04-07T03:36:35Z","last_seen":"2026-08-19T14:03:08.127508Z","times_seen":1105,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/js/custom.js?v=1.1","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.013Z","timestamp":1787148014013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/js/custom.js?v=1.1 HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1823\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6247,"size_decoded":2060,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (484), with CRLF line terminators","md5":"86854cda1005f6eadca8bfc575f5da7a","sha1":"4c1ebbc14e6640e9da04c22987aca480b289b977","sha256":"801c04c93ce86f91b7fc97d03d9072de37394a456e6355ed119ab3be46cd4270","sha512":"c8b3531dec8cc2f1b4b65db34540a31babb2327d9a5236609edeba96b944ba4df3aff7a79617281a39078d87ad5dd166cf80a0d741404b33267ac7abdbee8b3b","ssdeep":"96:XjvVIVhpkOLhIsyVQbuOMdMAlcPkk2kwwk/Sk6nkkPqI10N2NhV49R:zNkfkOyPR5dMrV2fwYSfnVP9ddgR","tlshash":"55d1910c7b0a1969da331ba48f3e9524ea6a5063a608c315fcfd56a05f3144ce0b7eec","first_seen":"2025-08-04T12:09:11.054433Z","last_seen":"2026-08-19T14:03:08.154261Z","times_seen":33,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/main.js?v=1.0","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.019Z","timestamp":1787148014019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/main.js?v=1.0 HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 10 Jun 2024 13:39:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1529\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":5576,"size_decoded":1766,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"946f1f45e590d4a58100253781222b2d","sha1":"6fdcbf9580f37eea6a85e65921d54b6e88510b89","sha256":"8cf2fc02277241a001622316b4ab0e35716c382677d41a901523af4afec663bd","sha512":"6a40a79ea64c96611755263bcaf4d9fe1e0888c6739f389cff5db89d1b9958907794145c5245609ab2795cd8f7041660e2987a25f00ae652299e87853a29ee01","ssdeep":"96:tMiGjsXwcr8EBOPqWoaS9a326eFqDcDQSwOsErHee8olIdVHP1:BGjsXwcYg9h9RzFqDcM0+iadN1","tlshash":"19b12e14b0f111b590bf30e59fbba5003a28404fd006de50f94e9fc54f95a74e6a3aae","first_seen":"2024-12-07T19:45:02.392438Z","last_seen":"2026-08-19T14:03:08.059156Z","times_seen":67,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/QjwmPaTcxacRTIlHQ7J4.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.032Z","timestamp":1787148014032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/QjwmPaTcxacRTIlHQ7J4.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 141502\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141502,"size_decoded":141769,"mime_type":"image/png","magic":"PNG image data, 690 x 690, 8-bit colormap, non-interlaced","md5":"facb845093a97627ad590ffad3f93cb1","sha1":"86a48282da0e6c3d4387db187f72aa6edde707d3","sha256":"409edbe27877d42d03118288f6a828082957e2acc6f070c4f5cde5d719431d2f","sha512":"59f7e6e8b9f363058ddaf593d06da786cfea328fb57fa17d87065b121c882312bc7d44640ec68a28a0fcd637c074cbc670ff9336e1bc4def0f8c90de6a9a3303","ssdeep":"3072:NTAIXeL+uIrQq0Drmgz7pDvByVHX73Ck75goGPFwX5Krssl7:xAIXjq7pDwdyk75gtPFO2f","tlshash":"28d312f7f9af698c60eb445f0523b0b16af922b680823be4d6504dbf02d35601e517be","first_seen":"2024-12-07T19:45:02.29546Z","last_seen":"2026-08-19T14:03:08.108993Z","times_seen":66,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/Fzo0HWNdpYNhRncxttPS.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.047Z","timestamp":1787148014047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/Fzo0HWNdpYNhRncxttPS.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3074\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3074,"size_decoded":3339,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"5cca702fa2011b7e43bb5e463c5468b3","sha1":"d60d64230dadaf472b5b3c7a5c31e7b97aa2c17a","sha256":"ca4e214de6fed6415fc1399e8f962e7d851baa70e206d768135e3a1786295e6b","sha512":"12f3e1a894d7273d56b960449463bbeb589a3ec301983d8725d9ff78b425abf28920cb8de49fe67dc668045a5075d008f218547a520cba57773440840dec929a","ssdeep":"","tlshash":"30517de8386085cdcb3d694a586f7cc4cb7802e86a38a99c00896db6d3fc1045fd73e6","first_seen":"2024-12-07T19:45:02.169853Z","last_seen":"2026-08-19T14:03:08.076803Z","times_seen":71,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/coinbase.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.075Z","timestamp":1787148014075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/coinbase.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 68113\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68113,"size_decoded":68379,"mime_type":"image/png","magic":"PNG image data, 2600 x 909, 8-bit/color RGBA, non-interlaced","md5":"8ea2a12b4033ea6e6fda8cff79f4ae06","sha1":"eebc256f28fed8f7b212a91b5a85eb1b88506cb3","sha256":"cb40b5bd754f86d1809653d2abd92557621a3344d7f7dbf6faf6c3c6a05837cf","sha512":"f218c8d98d6425435da872362afa746b769f90529b3b8dd325e7e82233a6245b4c7cf543b2430cec17b618b5cd0bcbe32a715b6504c1f82756e1014582de3e24","ssdeep":"768:a4oesXdLLcEHKiSHElOn4Iqv7DMx80dDduj0jQtPkwyHcbmdZ/tbl8OEN47ns1pu:a4oeILui9On4VDDadFJH/tbljn61j0ZR","tlshash":"3063d033fbb87830d6c386769a9e0f175f240b570507f8b1db7a402521426b1ac9cafa","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.074403Z","times_seen":258,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/monnify.svg","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.081Z","timestamp":1787148014081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/monnify.svg HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3169\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8218,"size_decoded":3483,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc8c5ae7fbb7f655819a5f69a4841260","sha1":"76130ce35b9df4994e78d3c64ce171657cde575a","sha256":"0b8d1e2e279c35d565772466151570a451c4ca4420ebdced43746bce95549d08","sha512":"b1ce7f6d42433e59362d7b294e1dbd3618bce491e0bcc259c44de09b3979b84e2de881a00ad565531fa2958d4e0a53d5e985c96da8c3eed95a8e10526426107b","ssdeep":"192:QqMZ+Fi+NlCOYeOuuZ1KzplkO/RE3fDfq2X3jlrWklCV:QpoFJnqQplTEvjBrWaCV","tlshash":"8802a5feb6f4a2f06403eba5ee3625567d1f30f97f028ae04284af0965158d8edc9c50","first_seen":"2025-08-04T12:09:11.038284Z","last_seen":"2026-08-19T14:03:08.045252Z","times_seen":29,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/coinremitter.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.085Z","timestamp":1787148014085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/coinremitter.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5134\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5134,"size_decoded":5399,"mime_type":"image/png","magic":"PNG image data, 176 x 44, 8-bit/color RGBA, non-interlaced","md5":"f19e84bfc809e4121c168b8b155c5193","sha1":"4d1d44c549392555232525e10f15a9eac443db7e","sha256":"8ed409a2528500c4e5fc57916b43d71cf9d0b1ca24c88b67bb12c68774beb7db","sha512":"d34aa441bc3aa6b668d19409a45b5e7ec16e20c0e33bc0039d030914b24032df835f049d34d3b16faebcc9461b7cd9556c461f6cc5f03ecfc6245c45f5d150c9","ssdeep":"96:uESTzbZOGkf7hGvamsJ2gs0UGyhL78h9NOUSXWdy2jjiQ7CInOhEjYUcXgWigUw9:uESNO9ESfj/ydorNOT4ysji/InQIihiU","tlshash":"aab19e4ddb0419bfa3ca30a10a6e0d769f637ee117a122ed0063420c753f6b5d799e13","first_seen":"2024-07-17T00:16:24Z","last_seen":"2026-08-19T14:03:08.120456Z","times_seen":217,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/css/fontawesome.min.css","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.974Z","timestamp":1787148013974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/css/fontawesome.min.css HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Oct 2025 08:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 97613\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":520595,"size_decoded":97923,"mime_type":"text/css","magic":"ASCII text, with very long lines (51856), with CRLF line terminators","md5":"970b2fcce2d3f9a1de6ef3080919e6d8","sha1":"9ceb1cf36352b5d76d368a979e16e84104abfe7a","sha256":"10411d3841cd53842563358c0fd466773a9e33ce7b699d91ba7c2be801a1008c","sha512":"9bd864dae8b0b42af104d452bc0d284e0d9a1f24a40ffd87836226866436e9b86141f7d6cdf30717468cc99be03df22a25e9ace862474c7915ee9414ccfd0d4b","ssdeep":"3072:W2bezW4zmCxKFVg/yWtIY84iSLCVFJMWpHjoH/RkB0S6kx9RxDQwO:Jbezz6CxKFVgdKYMJBpHEH/R06cXO","tlshash":"12b4e9a0a05520dcb3d7e60f5b02b629e4b3f33ed9814f5fe1d5484e0dd3a6871867aa","first_seen":"2025-07-23T06:55:03.729104Z","last_seen":"2026-08-19T14:03:08.1065Z","times_seen":54,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/css/magnific-popup.css","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.978Z","timestamp":1787148013978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/css/magnific-popup.css HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Oct 2025 08:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1725\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7718,"size_decoded":2034,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d41c4256ab817cd6eff39e13036d9e31","sha1":"a202ab6182a7ae4847810705d333e70267a3d3ce","sha256":"5e1de51ecaa4657569a012301254f6acd6f68a4b61af5f45fbfccb360d647ce7","sha512":"e65805ba0599a338f33755aa301405fe3c9acc7886cf0ce27c44e0a3eb64ec958a9d33e926cd8c5b7323431675285079c710dee0ed29d8426fbe33debfabe2fe","ssdeep":"96:0Q3SMVt4G8g8bAEz81iWdQtRyiEpsL2R4+pNO6lYixoAq98Z/vtFFz/0FQKrO:Nd4G8WwSfoRyE+pNbxHq98Z/v1z/tKrO","tlshash":"08f1d016db112342d137e7b4e7938b29e7220073d30314abbfd99845ebf9a484261fd9","first_seen":"2025-08-03T21:30:07.693978Z","last_seen":"2026-08-19T14:03:08.127962Z","times_seen":39,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/88lL6H7CNtKQRKj2Z0Aj.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.027Z","timestamp":1787148014027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/88lL6H7CNtKQRKj2Z0Aj.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 18 Jul 2026 03:20:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 147243\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":147243,"size_decoded":147510,"mime_type":"image/png","magic":"PNG image data, 790 x 316, 8-bit/color RGBA, non-interlaced","md5":"566351ceb391027b37f62957cdeef11c","sha1":"6d6ef3e5e617f8f4df1ed5ea75bf8a9de93638af","sha256":"35bb28b573bd47102bca51b92496e55bcb0ce9b3842f33fb24e5b93998452088","sha512":"818d9b68c4fd44b50b004541eb7ec5f4ac54e8a83b60b542ebfc275af77a5a29a73fa72a962ea12dd14e6ad892370b0d6600096a6813ff75a5ea23ff6e99b9f5","ssdeep":"3072:yriWDBhhuUaUxL9WvsH6s6Y8Hn8Xpn05HyQ:yx9Wvsz6YeWplQ","tlshash":"83e31217e7fc7c6be0970c39011976f425d8f0b582ee4f92faa829ed86e83d4504ab15","first_seen":"2026-08-19T14:01:11.281776Z","last_seen":"2026-08-19T14:03:08.108393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/images/bg/experiences-bg.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.060Z","timestamp":1787148014060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/images/bg/experiences-bg.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 184499\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":184499,"size_decoded":184766,"mime_type":"image/png","magic":"PNG image data, 1297 x 847, 8-bit/color RGBA, non-interlaced","md5":"8923214d7474af9c7633d1a0b596a3be","sha1":"68a3036e2ddaa8d0ce338a0c2cf7a0e306ea8601","sha256":"011f4c6d05701424306c05e249b2120e06f04fbae938370f83b422c8e9e385b6","sha512":"d1e6a740617ac4a5ac0d78cd2928ded7828589853efffe8ddf20ca6afb3e5b71c7d445b97021bc48e03f56a0665212b850e0f04b730a04e270e56e085f66507c","ssdeep":"3072:rhOkTKm+dRnNgJNNTpMsfzbcSjoK8WO7sk0DesPxZEYTLC1TUohUsNMTA:rkEKmgRn8lMs7Qrx7sk0DesAU211UcyA","tlshash":"680412ded30ed20aeaea3e742f91cb57be11e666508edf4d01e589720e08ad71d36143","first_seen":"2024-12-07T19:45:02.301549Z","last_seen":"2026-08-19T14:03:08.057426Z","times_seen":61,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/08qYc4HTRP9QulkSXRbn.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.065Z","timestamp":1787148014065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/08qYc4HTRP9QulkSXRbn.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 134128\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":134128,"size_decoded":134395,"mime_type":"image/png","magic":"PNG image data, 690 x 690, 8-bit colormap, non-interlaced","md5":"bc39b618014645989e0b48755bd73155","sha1":"fc40231b4e68fe207b816a3ea630b09ae1052ef9","sha256":"748b9feaee89cd42aa7f6793809ea8c86f856ed02e224b057152c2e54d250214","sha512":"7910122a40663717523412bc1f1ca5116eab872ea8d2ed4596344a7da01f2316e0d32edb3f081d6bd065ed6a851d6344428c4b88ddbb937503c6f50087533695","ssdeep":"3072:U4ZUU20xQcUSRAGTwnKq2gg23WstxHUgR2+2aqDidv5K:U6UU20jUSRAGOQfQU5+QUM","tlshash":"7cd3134f33727c94fbaa3a4f5c86e680d3a8f8520b84811fe43247e1d4d1be988169f5","first_seen":"2024-12-07T19:45:02.303684Z","last_seen":"2026-08-19T14:03:08.133113Z","times_seen":60,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/perfectmoney.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.074Z","timestamp":1787148014074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/perfectmoney.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 61034\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61034,"size_decoded":61300,"mime_type":"image/png","magic":"PNG image data, 960 x 480, 8-bit colormap, non-interlaced","md5":"01fb2f41ea642228489d2d424f5ebdc6","sha1":"e7d5314277e342d8f1cfb642bf94315d08b0aad1","sha256":"c7de3482bfdee121dc857b4d236923754ad176b4ee9db4982677fe1d1ce3a251","sha512":"fd0f73ec957dfcb1567d9b1f10feb1173639ac7dfa1022ab0fb3e7d89c832cbf92b3904330a0f61295ed9e6b4b5e8f3f200f7d94e1363254079b9b552af1c6c5","ssdeep":"768:CtJ1pLZloVyv8dZ2FOdhO8S4ba+BGhjkF4uU8EUpkrXYvYl3:CTZIdZ2FOdhO8fa+Ejk5DiMvYN","tlshash":"7053f15d6ce6b120f85cba7a1ce27046c816af83f0929d0c78dd9883df44bda4c675b2","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.126402Z","times_seen":243,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/coingate.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.080Z","timestamp":1787148014080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/coingate.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12958\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12958,"size_decoded":13224,"mime_type":"image/png","magic":"PNG image data, 1142 x 172, 8-bit/color RGBA, non-interlaced","md5":"bf9232d36c62a43d0e785dd4bc431ff7","sha1":"0ef34a67818735da7e08631bf1a9ad2c9b2ffc18","sha256":"834acb44e5d2d940784a1cdf8ce497401fd9efa30a8469b8fbd345ce9523e4cc","sha512":"4d57a1aca4ec6d71f23264a9a07c6a1ded8b02072f588570ed7a924a28f06a4cccc423881afe92e415ce82fa3bb79e7d7d13853dc8e4320e0f8dff2318263c61","ssdeep":"192:oX/Ty3T+DQBob07aN57X+wV/ZrNuW0nR822sn8Bx9bPHgVwRb97FvtC6KPdwD7af:iYub0uZOSZY9RkL5oVwRb979HKPdYEF","tlshash":"8c42bff434dd44de831846135668ad42f8f2224677bb648ef0049a665e6f32f89f4d3d","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.113219Z","times_seen":245,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/razorpay.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.097Z","timestamp":1787148014097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/razorpay.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57894\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57894,"size_decoded":58160,"mime_type":"image/png","magic":"PNG image data, 1896 x 401, 8-bit/color RGBA, non-interlaced","md5":"fcfab23729c571d2abe2e88854bb363d","sha1":"1d2761d90c77e158096c0a211a4c247bec264667","sha256":"a5d30c96b4589e2aaffca2667010c8638c397e418ce40e44dfd308e82463791e","sha512":"cd86fd6ca99fde1fb84dcf17e3ba4145c1a956de7cdc49413367af1c98905469272a27236bd5a257f6fe319fb2950cd0547337b995010e77f53bcd3b264f4b56","ssdeep":"1536:+lG4ZSHw0orqmVhj+02U6iFs19Oqklpojbc/A:+lGQSHwtquhj52U6v1IPa3","tlshash":"6c43028d4527d2079cef14e0067d72520f39528ca4be9ef630b4b0def6b50ae6e9d016","first_seen":"2024-10-24T21:44:25.898473Z","last_seen":"2026-08-19T14:03:08.095586Z","times_seen":181,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/css/select2.min.css","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.972Z","timestamp":1787148013972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/css/select2.min.css HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Oct 2025 08:27:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1949\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16265,"size_decoded":2258,"mime_type":"text/css","magic":"ASCII text, with very long lines (16263), with CRLF line terminators","md5":"bb4f601b18b642bda193fb02d8845d94","sha1":"dd955de114f23a39b7ce95f62c56b77aed15f7ed","sha256":"4a7641c6c583062a068c15438922a6ab5087da847d51d18b36929b013f106671","sha512":"e9be22785e1fe87e33b3fc557656c0c0985687ddcd080c303c8935464f65be56c77ec211d6e792a57c6f4653b5e6a510d06ee6f075a16e34497f645062066e09","ssdeep":"192:1EaNSrenTfc3aq6J5wV1Q9CPxWqAUJKk3BcH9t3E:1keTfXnS1Q9sWqbxRcdpE","tlshash":"ef72d935bacc2239b0bf8e7f6cf2b4946629dd5fc4111b9ab8e9e154c8e04540a4b60f","first_seen":"2023-04-27T00:33:01Z","last_seen":"2026-08-19T14:03:08.066325Z","times_seen":1941,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/css/custom.css","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:13.977Z","timestamp":1787148013977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/css/custom.css HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 777\r\ndate: Wed, 19 Aug 2026 14:00:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2943,"size_decoded":1085,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3c6438332df6672e84cc443044da1241","sha1":"1b94d21652b828d1712b7cd8d2427827fafe82cd","sha256":"ac3daba886639768125f23b9165ca4a63ba88b33fd6ed45612eac6bcbce70c81","sha512":"f60d2295200c3ce2dcedebf557365a6396482f40f1fea46df293ab66f7742ea76140d6ae998b7989e4bf04e02bb9866eec2f2efbeeed4423b6c6ae2b18175cba","ssdeep":"","tlshash":"8951e258da1e13437a37f6f93ba20f16ee8050a70a4605297be872185ff14349c75edd","first_seen":"2025-05-10T17:24:06.515606Z","last_seen":"2026-08-19T14:03:08.153186Z","times_seen":51,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/cookie.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.018Z","timestamp":1787148014018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/cookie.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 29 May 2024 03:23:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 614\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1631,"size_decoded":850,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"1d87ec77078513bfac7dec385a07abb1","sha1":"daffd330ad4aeb19761ac94c71e96432ae2ba0e5","sha256":"a49c235a27d8a30e6dab188452f01d3a8c4f8509e83afeb50c30f4da4febf872","sha512":"eebbb8f52511e4e8c6bd4b769e5e5d37f1191671058ea37884a9de0cd13b130a80f28cb21cb786f3dd39a49e67573290e0d0f873759afa2319f3346f6e67865d","ssdeep":"","tlshash":"1831de28b2e259bc4a27211587df83c6387011131065c54dbc9eebb11f84c1b8d7bae7","first_seen":"2024-12-07T19:45:02.408841Z","last_seen":"2026-08-19T14:03:08.050763Z","times_seen":67,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/parallax.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.020Z","timestamp":1787148014020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/parallax.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3728\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15991,"size_decoded":3965,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7e8d93141d507d04bac101e86ec0b74d","sha1":"dc7b2c284b6509824a332d83b9e272610bb24354","sha256":"b2317dabbcbed3b8623801fb7a9e6bd4f880820b6eab44640ee7ca41ba7822ad","sha512":"b5fb36c3614f77e3b1c3f51ffbe3ee4c6df158b4074da530a21909dd27ed331d9f8e692139b7bb7f3ae7826e41dee53fad7ad1b8e8dafcc3dbe6cbb00301de14","ssdeep":"192:QsN61Oq+4Xq47ehiWTUOiyWQbqwuBlZHsE4WIc/OncGe03aiU+sgJpR9W7AvD2aB:Qfv+Sq4FznZ+s8DiXu","tlshash":"9b721e4a2bba1c21e23b22664fdf9548b238951f1d03c45d396c52d80fe6974137efba","first_seen":"2023-03-07T13:48:59Z","last_seen":"2026-08-19T16:09:57.51417Z","times_seen":283,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/JLkDDa0oBDODEJSsCVeK.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.033Z","timestamp":1787148014033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/JLkDDa0oBDODEJSsCVeK.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2935\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2935,"size_decoded":3200,"mime_type":"image/png","magic":"PNG image data, 84 x 105, 8-bit/color RGBA, non-interlaced","md5":"5b50649b608f48cd461035f4ebc3e1ed","sha1":"13f1614a49c522d465dbc788bbaa1bad2daf1c6d","sha256":"933c4f25750fd1739a686c8326e703bca99aa0f541c65a0e95030f97655d0639","sha512":"b36d51d1724dd1485882b500f84eb5a2400f17d78ccb80e58af0923b156ff5dcbc0b71d61330451e15925c731ef950ff1db3903a3e9c9127e88e5159f8e2a54b","ssdeep":"","tlshash":"e3512d9df03685e0b14d06f7478bd450543d35c360caa0454d79eb31bab18f962a959a","first_seen":"2024-12-07T19:45:02.15196Z","last_seen":"2026-08-19T14:03:08.125585Z","times_seen":65,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/r399BNLtoX5lNDRghEGO.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.054Z","timestamp":1787148014054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/r399BNLtoX5lNDRghEGO.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 11 Jun 2024 06:43:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1024\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1024,"size_decoded":1289,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"84e7492013d06ef721dab1808579064c","sha1":"c2a780db840dce8f9a7043b433793a59f0e187e5","sha256":"6c3758e860726a32f5a8f2f0fe66605d97cdd82bbe37481758d36df9671e5185","sha512":"b84317518b21cf9f92312b5bad1c89ebfcd9c682eb0ff75c4319219ba17fa6e348254b571de6f95eaf66aacc70726d8e2aece88a422dc250b8ec1b7099f8efb5","ssdeep":"","tlshash":"0b11a5af918874f5253e0871f17aaf48e9b23b189d84605af8a755adc414c020088afb","first_seen":"2024-12-07T19:45:02.161972Z","last_seen":"2026-08-19T14:03:08.061646Z","times_seen":72,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/vZG3MUwCzIZq3gw094r7.jpg","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.069Z","timestamp":1787148014069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/vZG3MUwCzIZq3gw094r7.jpg HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65804\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65804,"size_decoded":66071,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x400, components 3","md5":"fbdc44b1ccd7dcbfb4d6161c63fef045","sha1":"0175decd3ba4677757d8f173cf5b9a1d08f8e686","sha256":"aa45b9e4d8b36d30687d99f495a8303760734560ca12e9eb80c36f2e7160ac60","sha512":"0a34fff165643a6e0b09944a236c96fae77f0708606820d29a23ab452f04b5573cc4c0a0a3e3be4378a082d2fc381909c68263b3ea465274cbace0768dab4861","ssdeep":"1536:ojbSyF0Zv+cKTJozCp6micrPxyNS7BsmMyCTwXv7mlUig:ibYETB6mdxf5Ms7mlbg","tlshash":"775301ecdb121269e5226f3a10ec2fdc1cedd6cbd5980bcefc2e50e61186456a8fd614","first_seen":"2024-12-07T19:45:02.283297Z","last_seen":"2026-08-19T14:03:08.151025Z","times_seen":48,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/gateway/stripe.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.072Z","timestamp":1787148014072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/gateway/stripe.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24271\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24271,"size_decoded":24537,"mime_type":"image/png","magic":"PNG image data, 1200 x 570, 8-bit/color RGBA, non-interlaced","md5":"3f8738ce9db921531050950364397570","sha1":"87f193ad9760f528442d31e00022b368bdcb4ee4","sha256":"de0a0cbfca9eb8212a3d4d86f044075d32ffc1ade560c0d9cc7834f82f3cd565","sha512":"ebae73adb32db56cf5de87e2789bab33cdb07a4125d8e2c4f197732d75ddb6f46d34ae64c26081077549ac7411bff4ac184314b9884a0bdb5d61e723a6ea472e","ssdeep":"384:HX+QxOdLaI9pKQv/P0frOLdBEEbdTOZW272uQT6X8GaSJH7+SFpe1etff71h:3+Whc30frqdBES4Z972uQTq5HR7tFAs1","tlshash":"b0b2cfdf9662ec1bd5f1b8fb08179aa0323d4c431f261a5509f1be723ce187f9884968","first_seen":"2023-05-27T13:57:32Z","last_seen":"2026-08-19T14:03:08.044141Z","times_seen":239,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/front/js/magnific.min.js","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.014Z","timestamp":1787148014014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/front/js/magnific.min.js HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 07 Apr 2024 00:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7035\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20210,"size_decoded":7272,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20081)","md5":"fcabf2e2d85324d09429dde6484e4105","sha1":"0977652d7f946a8c532d535c75c0e19fdc5c3d45","sha256":"084a17681a83386f6c551844a31519482b905b512019c767e162e65e0b52ae85","sha512":"474eef11a74cf81f0af78e54ab1a39ae05993f32717ed7689a6afd94a14fc5d665233403332fb6559ba11ca48a40d0e9a1f76c278c2a1e1b69bceb3154e19917","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/j6l8aZwHwztLCpmst:lPBIt8I5h571qkOLCMst","tlshash":"a7921894f2b2b21383a735b8686f70093a729952ed06c855b55d94d87efcec89027f3c","first_seen":"2023-03-10T14:49:25Z","last_seen":"2026-08-19T14:03:08.058241Z","times_seen":173,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/pJKbUFqIorpzdmi8H0mJ.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.052Z","timestamp":1787148014052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/pJKbUFqIorpzdmi8H0mJ.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7892\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7892,"size_decoded":8157,"mime_type":"image/png","magic":"PNG image data, 496 x 462, 8-bit/color RGBA, non-interlaced","md5":"b7126c2c8a9d38d6b0cbd939fa321305","sha1":"3d53f2fb746aa5721d1700c7c4c79965220fc902","sha256":"4cfa75aa51971a4cddaf2738094179c7bb6803f7b6f73c5aed1d597df62d8a8c","sha512":"5af905f6f59537915865d844b501745cb0d4b53e854a4f2e455e0685cd027b4576473133197dbe9215d889cfab6c2c6a960b3ab3f558b8537ce7f777cf3f5111","ssdeep":"192:gSFcpxq0zbSabJXNZcb0cDJZNCCLGDq07nVy0ruDUB+/hGu9:HFcpxxVXNZWDs9ODJ/V","tlshash":"e5f1bfbcac3f8e847e014870d61d15c43f9d15d76066a8e827867e12b2f8e4c47adb03","first_seen":"2024-12-07T19:45:02.159981Z","last_seen":"2026-08-19T14:03:08.09092Z","times_seen":66,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexaglobalfinance.com/assets/global/images/RvNRCrXbVHT7JYRaqCgu.png","fqdn":"nexaglobalfinance.com","domain":"nexaglobalfinance.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexaglobalfinance.com/","date":"2026-08-19T14:00:14.066Z","timestamp":1787148014066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nexaglobalfinance.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 16:03:05 GMT","end":"Thu, 15 Oct 2026 16:03:04 GMT"},"fingerprint":{"sha1":"99:C9:12:47:05:13:BE:1D:51:C8:65:50:7E:17:33:6B:0A:C7:1D:87","sha256":"8D:08:9D:22:E9:B9:A4:2F:15:24:1E:4F:28:D8:B6:DB:FA:E5:19:79:66:B8:C8:C0:65:F5:97:94:B5:E0:49:05"}}},"request":{"raw":"GET /assets/global/images/RvNRCrXbVHT7JYRaqCgu.png HTTP/1.1\r\nHost: nexaglobalfinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexaglobalfinance.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImZ3eDJSSUFXZWwxekIwamxpRVFVeHc9PSIsInZhbHVlIjoiR3Jvd0NKMHRJVXkyK0F4ZVlRMnV1cFM5Y0lxZUFaa1gyNUpOVzQ4MDIvbENrYXlJMTZDR01MM21JR0t6N2k0cjJRY05aRzhBaDc4T1NOb3Z0Q2c1RHgydzg5Z1pTVWJ4eml0WlAwSC9sMnpPTEFNSTkwa0FWZmpRUExId1NzbHoiLCJtYWMiOiJlN2UxYjgzZTllYmUwM2M3ZjRhZWZiNTRiZjFkMDc5NTZhNDFmNjE0YWE3MmExZDczNzQ0ZmNmNDkyMGU5MzM3IiwidGFnIjoiIn0%3D; digital_bank_session=eyJpdiI6InZmT0RsQ3g3b2xKa0w4SmpWTjB4cUE9PSIsInZhbHVlIjoiaTNlRm5hMkpES1pyVE5kV2NRMkJkMms1d3pUR0piWXR6MkhIakJ1UFl4SWFGVlJrZTlvUWJrRkp6dlhRNVNhb29EdElYUWozR3RPK3JFd2dISXJjVnB1SlZKZEtlYVh1RW1UZFQwSlhtZk5YWjNlajQvQmw5L21ZWkdCdkxveUoiLCJtYWMiOiJmMmU3OTUwODRhNzBmZWM3OWUyYjAyZWJhMDUzOWRhZmUyZGM3MmNmMDZkZmFiODc5MmRkMGE2NTAyMjM1ZWUyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 14:00:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 05 Oct 2024 10:06:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 119792\r\ndate: Wed, 19 Aug 2026 14:00:14 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":119792,"size_decoded":120059,"mime_type":"image/png","magic":"PNG image data, 590 x 590, 8-bit colormap, non-interlaced","md5":"a15ff9efa7a57a77345cd10bc2a05abd","sha1":"52ce38c1d2c6eb081f27569b630500a1c3081661","sha256":"9927b16f493dc162f6b9b40368bd23665ebcd4302add841a63900495a3a2efcf","sha512":"df9635772608e0dc74df4cc0a0ad50bf217bf844d61d43ed4de196fc5a93a3e447834e9e2023027d785b2fb7067ba6fe907b66c088d8a54c56a8912c84f07a13","ssdeep":"3072:mcfTUJVBkWJl9BaMvcInIaEfINu48lXNZE20IgItY:oG8aMtVNu48lBgt","tlshash":"f6c3022cd18e66b666f5a3c92b71b8701f626813faf50f778ce540964e0263b00e75e3","first_seen":"2024-12-07T19:45:02.279299Z","last_seen":"2026-08-19T14:03:08.133732Z","times_seen":60,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"nexaglobalfinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}