{"report_id":"eb853212-7203-4373-9ffb-7fc98e5acc82","version":0,"status":"done","tags":[],"date":"2026-08-17T20:11:27Z","url":{"schema":"http","addr":"nexiscore.live/","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexiscore.live/","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"title":"कर दंड सूचना - भारत सरकार","dom":{"size":17007,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ba09b861c896a92429143a418e32e651","sha1":"1c2bddf9eba6ba11ad98ec211cfb6389b9e7af7b","sha256":"7c23ae3108168da8c48adcf11affc46e9a0dc5e4d76704abf36e91b41e50e3d1","sha512":"86272bab5b8ffde1e08a5fdcacec7e21d6ac3ec4f46bf2064c584428876cc47862cfde52fa86dc0c1fea254e186a636b30506e6fca50e29dcd97d35922ec7610","ssdeep":"192:ucWusNVU+hQhCv8s2VqXlXTQiD8VyJmLOcmMy6rjTunwrPDBf2XnPrMgircQ9:eO+6syLO2unwbDgnJiYs","tlshash":"6872645ee7b331216417b46837ab5b3336b49023d60bc9653e9c6388df86de049a339c","dom_hash":"domhashea80ba9dbf479f50cb9369b705f000e5","first_seen":"2026-08-17T19:50:30.596153Z","last_seen":"2026-08-17T23:22:02.565275Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexiscore.live/","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-21T20:11:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"nexiscore.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexiscore.live","ip":{"addr":"104.21.25.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-17T19:50:26.230702Z","last_seen":"2026-08-17T19:50:26.230702Z","alert_count":20,"request_count":5,"received_data":63046,"sent_data":2283,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.5.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexiscore.live/","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49808edb6f1807801d4a7481bfbd0c17","sha1":"3834393954ffe3a0fb43a4fc253bb1652acbd71b","sha256":"ded6ce1b3646ca1403a98efcdce7c69a6674b560de86d1109f01ce2a3c055417","sha512":"24d64446256bee336aabcb0706fb3ea13d2f6b0af6e821f128c93d6d6b6bddf9af378e3df024fae4db0ed41a0f92747f5a58be6a88b35255cc75d40a2a95a84e","ssdeep":"","tlshash":"e7f0ecfd755320a0a25b706b5fff9240727a6a132d45c98a7e2c46c80f6195540e98dc","size":583,"data":"","first_seen":"2026-08-02T14:06:18.704842Z","last_seen":"2026-08-17T23:22:02.580412Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexiscore.live/","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b03e4fd1058f6f8e84848ba7914e54d","sha1":"d9be8e2a030577ed47848418836fcddc434f0b7d","sha256":"fa0d768e9013737a60e46ce1a0d5b1bf95d53eca296a6118a41bbf6d1b4b044b","sha512":"c8fe54623949b15454e33e1b3fe2bc7c76c95db7a502d0d0a3359caee8b64a51b543b583c7e3123a5542a5cba790e0265334cbfbdd4a6d04ef32d54724396985","ssdeep":"","tlshash":"6271651ef1b3112241673866271f9225367590272d95c9827f4d8bc0bf83fb18673dad","size":3488,"data":"","first_seen":"2026-08-17T19:50:30.620343Z","last_seen":"2026-08-17T23:22:02.581286Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexiscore.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-17T22:00:39.064346Z","times_seen":421489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexiscore.live/visit_incometax.php?_t=1786997461801","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://nexiscore.live/","date":"2026-08-17T20:11:01.825Z","timestamp":1786997461825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexiscore.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 07:10:07 GMT","end":"Thu, 12 Nov 2026 08:08:37 GMT"},"fingerprint":{"sha1":"61:2B:85:3B:22:A5:C3:99:5C:9D:EB:7D:1D:0E:FA:3A:49:06:F7:DF","sha256":"BC:63:58:25:17:C0:78:11:BA:C7:DE:57:D0:A1:3C:70:A6:79:74:89:66:57:04:20:74:E6:26:7E:72:FF:E2:A7"}}},"request":{"raw":"POST /visit_incometax.php?_t=1786997461801 HTTP/1.1\r\nHost: nexiscore.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: null\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: image/gif\r\nexpires: 0\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.6\r\ncdn-cache-control: no-store\r\nserver-timing: cfExtPri\r\ndate: Mon, 17 Aug 2026 20:11:02 GMT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jEUxHTvIcMogAik5%2FdFFQhx8qkNz1SL4PMXcq4SQuVSV3Lwc0Eir8uwQrC2i0LyDUObXD3VUlP9%2FfKNGPTpLfn2vJwSpTDu8th6oftS5UhxEyV8GQrBrhRWu27ocR0S4Dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2cb53586bb632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.5.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":42,"size_decoded":760,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-17T22:23:51.741472Z","times_seen":1034788,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"nexiscore.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexiscore.live/favicon.ico","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexiscore.live/","date":"2026-08-17T20:11:01.832Z","timestamp":1786997461832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexiscore.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 07:10:07 GMT","end":"Thu, 12 Nov 2026 08:08:37 GMT"},"fingerprint":{"sha1":"61:2B:85:3B:22:A5:C3:99:5C:9D:EB:7D:1D:0E:FA:3A:49:06:F7:DF","sha256":"BC:63:58:25:17:C0:78:11:BA:C7:DE:57:D0:A1:3C:70:A6:79:74:89:66:57:04:20:74:E6:26:7E:72:FF:E2:A7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nexiscore.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 27 Jul 2026 06:52:33 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:11:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Skql1xDYIpj3ICT7TPIfTHreijBhqMLnZrJFe3QUNsiKrj0ytEx%2FlvUnZcCup7kfwdPQwL1atJM9lQ6rEviBoAkkjdh3AEm75ycQyCHfmz3lESEM5WGwlFS2zH55KhEWNA%3D%3D\"}]}\r\nage: 1263\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"2233d80941ddd1:0\"\r\ncf-ray: a2cb53587bb732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":4588,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"d571a338701f201fb59bc2f07c3c20eb","sha1":"ba2f94f92d389347dbde7a3f5ef9fc0aa65a2599","sha256":"13741a952eb0948ba0ec255b48ee9d0c4b0d9b9e70c1311d15af87d3d93a8ad6","sha512":"76f0add6e82995f663fa24ecfccd005c885229a0aeca8b8b5cd038da99a291d58fd0b01ea29ca70f4b5efcdf5b4b76df2e3e3e175259274a649c48b1bea2cd76","ssdeep":"96:9YYzcCzRu8ZLL7phWaOJucUnWnktFa3qlPvp0F8dnyl1v:WYztgwL7FiumIFDPvLnynv","tlshash":"7912c742cad9d0badd8c23b87622b40e58107e293cb9e5dc8412fd6a933b5d105ab15a","first_seen":"2026-06-16T10:20:56.176065Z","last_seen":"2026-08-17T23:22:02.575303Z","times_seen":30,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"nexiscore.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexiscore.live/","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-17T20:11:00.877Z","timestamp":1786997460877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexiscore.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 07:10:07 GMT","end":"Thu, 12 Nov 2026 08:08:37 GMT"},"fingerprint":{"sha1":"61:2B:85:3B:22:A5:C3:99:5C:9D:EB:7D:1D:0E:FA:3A:49:06:F7:DF","sha256":"BC:63:58:25:17:C0:78:11:BA:C7:DE:57:D0:A1:3C:70:A6:79:74:89:66:57:04:20:74:E6:26:7E:72:FF:E2:A7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexiscore.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/8.5.6\r\ndate: Mon, 17 Aug 2026 20:11:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEglqijCf%2FmoLb331mnyJRcFdyIL68HTLN0qCthtTkZJ9CpNmDZ7XTuZEMBmGwTMoZjZLPKHKmiG%2FoBdR%2FDnzP1KRs09Njuq%2FbBD2v7nGnLmemqKTuNTNbX%2FfbOp2QuqaQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\ncf-ray: a2cb53535aca32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.5.6","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":17734,"size_decoded":5868,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f28f5e252b98dacd4fe7a6c690fc7477","sha1":"895c455794395d48674882b89b4c392f1781a699","sha256":"a19bb17028d37104447a454cad7038ae9c9e506c403e4c04f48000cf7748bc94","sha512":"543e71e37dbce4f3d9704a1b963fd46ffb1f2337bc3da9e9285225d0110b5ba77a1d9d8cc8a34d7a0fb2bae1839e981780bcb04bf208695ec28c03d2911ba589","ssdeep":"192:nvmKbItmfSGYNkKw8kWd76EgcmMy1rSIFnVbtnzbqhmdRQ2y5Pioef:GDngzpnVJnzeh8Qb5ao2","tlshash":"2382622de76031116037b6686ba74b76fba61133c70281653edca3829fb5d608663fdc","first_seen":"2026-08-17T20:11:28.899545Z","last_seen":"2026-08-17T20:11:28.899545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":-1,"dns":101,"connect":40,"send":0,"wait":520,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"nexiscore.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexiscore.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexiscore.live/","date":"2026-08-17T20:11:01.737Z","timestamp":1786997461737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexiscore.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 07:10:07 GMT","end":"Thu, 12 Nov 2026 08:08:37 GMT"},"fingerprint":{"sha1":"61:2B:85:3B:22:A5:C3:99:5C:9D:EB:7D:1D:0E:FA:3A:49:06:F7:DF","sha256":"BC:63:58:25:17:C0:78:11:BA:C7:DE:57:D0:A1:3C:70:A6:79:74:89:66:57:04:20:74:E6:26:7E:72:FF:E2:A7"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: nexiscore.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Wed, 19 Aug 2026 20:11:01 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AvwbBJD0CH%2FUwgdIsEioxDrMSd1JjbppmZNbd0k6ptk1gYtiLE9OINn8VkPc0e2%2F%2FoPxrJ77WZklsckH9%2FgudCA1C455ZLNVY1ESZObRKGBtkssBUp6iB705BYFCdKtnjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Mon, 17 Aug 2026 20:11:01 GMT\r\nserver: cloudflare\r\ncf-ray: a2cb5357db9c32fa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-17T22:00:39.064346Z","times_seen":421489,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"nexiscore.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexiscore.live/123.png","fqdn":"nexiscore.live","domain":"nexiscore.live","tld":"live"},"ip":{"addr":"104.21.25.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexiscore.live/","date":"2026-08-17T20:11:01.742Z","timestamp":1786997461742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexiscore.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 07:10:07 GMT","end":"Thu, 12 Nov 2026 08:08:37 GMT"},"fingerprint":{"sha1":"61:2B:85:3B:22:A5:C3:99:5C:9D:EB:7D:1D:0E:FA:3A:49:06:F7:DF","sha256":"BC:63:58:25:17:C0:78:11:BA:C7:DE:57:D0:A1:3C:70:A6:79:74:89:66:57:04:20:74:E6:26:7E:72:FF:E2:A7"}}},"request":{"raw":"GET /123.png HTTP/1.1\r\nHost: nexiscore.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Jul 2026 06:52:33 GMT\r\naccept-ranges: bytes\r\netag: \"7fc4fc7f941ddd1:0\"\r\nserver: cloudflare\r\ndate: Mon, 17 Aug 2026 20:11:01 GMT\r\nserver-timing: cfExtPri\r\nage: 1264\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rF96tB8l51qKj1q2LqfaohzZfeXzml7CJgQYvBA1s2F9WP7GR7L4bh4vUBr55V%2FmFEkJSbnw5mP69%2FXeO%2BKlKESr%2BwYwLZglp6jKKScDy7VZmF3NaEX9519XhnTOg6VpbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a2cb5357db9d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31006,"size_decoded":31713,"mime_type":"image/png","magic":"PNG image data, 578 x 126, 8-bit/color RGBA, non-interlaced","md5":"7ea55e75fca43a25edfaccff9fb9108b","sha1":"6993d51531859971c747e8ef2723b972210c2438","sha256":"ef93712576cb347b85bc8758a0e1a1a524f97238487f91206a7a1452b85bbd5a","sha512":"ba810a060ff828f6d8b70d7e51f399e3f2d9ac2bfecfb15290d5d1f12bf89dec3420465ac2a410ad6f9e94aad944ed4303e3195bf10eef121df766d94a790649","ssdeep":"768:8qTVp4KdCM1nZwIoyJtNm12WdOE7T5qtFGI6oVKV1Ogu9LIy:tt1nemRm1cE7TAtFGI6oqANX","tlshash":"cbd2d0893d94ec605c2d723c062b93d6dab42a8f5d41ba75e6cb85e08605b610177d3e","first_seen":"2025-11-20T08:21:41.371393Z","last_seen":"2026-08-17T23:22:02.571294Z","times_seen":56,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-17","alert":"Phishing Block","trigger":"nexiscore.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-17","alert":"Sinkholed","trigger":"nexiscore.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}