{"report_id":"f40d86cd-a89c-4170-b16e-d2441c533e42","version":6,"status":"done","tags":[],"date":"2026-04-14T13:34:38Z","url":{"schema":"http","addr":"nexuslabs.email","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":0,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nexuslabs.email/","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"title":"Lab Mail — Arcane Communication Platform","dom":{"size":398003,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20487)","md5":"5a9ba53e7a7c605d433600715b2a7d7a","sha1":"f8010c1b58b582fc8c8da440cfa9b60a5aef4022","sha256":"e71d05412a94c01d787489d92448a1a25c8a52197c324ac7a41363e18964173b","sha512":"1d17b8c043137ea48e41bdaf4f27b9a9f9067f87195b55b1ecbe87da9af3d932babedb941cf0a9ac9aa7651823a50a4759a22da806df6dc4770d2a8e2e549f15","ssdeep":"6144:den+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt+NX9wlEz3K8mpD2nU:dqrnxPOvyJZYLd","tlshash":"15847da8316911796ea702e5a0af6506b1383413b40d88b1f51cfc696bf49d73077faf","dom_hash":"domhash7881e8fcfb4ebc66297e5f2b8dfe840d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexuslabs.email","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":0,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T13:34:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexuslabs.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":13880,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nexuslabs.email","ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":2855103,"sent_data":3253,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":2,"received_data":35758,"sent_data":1085,"comment":"","tags":null,"fingerprints":null},{"fqdn":"manus-analytics.com","ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-09","domain_rank":0,"first_seen":"2025-10-19T13:04:57.49856Z","last_seen":"2026-04-14T01:23:36.88255Z","alert_count":0,"request_count":3,"received_data":6226,"sent_data":1444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexuslabs.email/","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"04922dc466f5064568485143fa28245a","sha1":"014a2847682b000a8278fe7384c469d5bb814969","sha256":"1288fa5ce0e4145f3b05569b68ac77f24afbb02d030a0bf497437709db138daf","sha512":"932250bd757f0d63f48245f2ce2b22c8cb692eb9556918e15cc331b4d6971744d34beca7b6b97c601fe41242aea40fd0a61a86117efce91f0c474fd19fdba142","ssdeep":"6144:z+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrt0:DrnxPOvyJZYLM","tlshash":"aa748e98327925796ea302e6a0af6507b1383423b40d88b1f518fc756bf45972077faf","size":366792,"data":"","first_seen":"2025-12-17T21:55:23.967437Z","last_seen":"2026-04-22T09:39:23.221129Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","size":2618,"data":"","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-04-22T09:39:23.206634Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexuslabs.email/__manus__/debug-collector.js","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45b1e83bacf2dc3d3b20bb18b465abe0","sha1":"88b427c2cf79636b41f578e5608dec454a2d7d3e","sha256":"e95d3246bc3757b46286221060b7346ea59fb6a9c94aa05f5eae7e7e09877d1b","sha512":"ea2e7df47e65f1a9675bcbd9c6628f44c66b60d13959647b93902090c36524f89b863caed4b98d300bb17b1d86d59674a7e7ec7f496df14c8215c2de32b467d2","ssdeep":"384:CPT48auPhcDdKW4iXns8CJJoCVWJWXkXJuxHn8+0pLvII67:CPRP+DdKlmWQbIr","tlshash":"3ab2628a1ce310724a53716d4f9fa54932328147194aed647e5c87581fe8b2f82fa3de","size":25168,"data":"","first_seen":"2026-02-13T07:56:43.422588Z","last_seen":"2026-04-15T09:12:13.516297Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexuslabs.email/assets/index-D1P-0ZxK.js","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fcb75ee18347383950981346f6b68fc","sha1":"91199d27491653fbbe7836cc21a808e6bd291754","sha256":"3d4b938d50b3da6bf0ffab9594e3f323605b2a7f4bbf3c9cdf9b8d21d0985659","sha512":"8a2c6d92f0f39625b7717a4e03738def727acb4156e29bfafcdfd6f0ef2e6280c24218d1727a435af64f8dfe04cf53a2ea3ee737b8d822a896e6c32ebd0f811f","ssdeep":"49152:+VFcV57PeEt7oHR4a48US9wpDVqMVEZrnJOBOoEQXSs52v:leEt7oHR4a48US9wpDVW","tlshash":"9f754c55768478395a9356b0a87fc103b03c3628f40e5494f138edd43ed5a8a7bfbb2a","size":1586002,"data":"","first_seen":"2026-04-14T13:34:45.769407Z","last_seen":"2026-04-14T13:35:13.472329Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Dancing+Script:wght@600;700\u0026family=Orbitron:wght@400;600;700;900\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026family=Space+Mono:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:15.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Dancing+Script:wght@600;700\u0026family=Orbitron:wght@400;600;700;900\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026family=Space+Mono:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexuslabs.email/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Apr 2026 13:34:15 GMT\r\ndate: Tue, 14 Apr 2026 13:34:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13194,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"02db3e948ddfc0ee30370ba6099aea3d","sha1":"85cda4aa64219cac56cd45187b03eb488f0af3c9","sha256":"0f2254d40b2becb1805bdfd416aff4994944b988fb0d4405aa40b14ff7260dc9","sha512":"35e421bfacad367105d5996c8c164cf54deb5bc3443da87b36184283f54581121273f43baba9d553e636c84af27a24b084f01447b065ea94f78f76b9198b7331","ssdeep":"192:cVUwgp27wHigpg6gMgacGGDZx/GiZC4GRZfRG4ZYiG/ZV6FY7sbBxx:cm/KDgR+be","tlshash":"39421091046be500eb531cc226cebe36ee4fa0556050d93d6ffe18d8ed9bd222315b2d","first_seen":"2026-04-14T13:34:45.750497Z","last_seen":"2026-04-14T13:35:13.446697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":138,"dns":0,"connect":22,"send":0,"wait":37,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexuslabs.email/__manus__/debug-collector.js","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:15.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexuslabs.email","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 09:07:56 GMT","end":"Mon, 13 Jul 2026 09:07:55 GMT"},"fingerprint":{"sha1":"2C:BE:55:37:BA:8F:65:AA:AE:19:12:19:7D:C2:9F:06:E6:C3:7F:0A","sha256":"FD:61:3C:38:98:59:51:AC:E2:EB:89:E2:9B:AB:6B:A1:EA:10:AC:E5:60:77:A5:ED:20:E6:90:BB:60:B0:76:F7"}}},"request":{"raw":"GET /__manus__/debug-collector.js HTTP/1.1\r\nHost: nexuslabs.email\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexuslabs.email/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\ncache-control: public, max-age=0\r\netag: W/\"6250-19d3abe99d8\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sun, 29 Mar 2026 17:57:43 GMT\r\ncontent-encoding: gzip\r\ndate: Tue, 14 Apr 2026 13:34:15 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":25168,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"45b1e83bacf2dc3d3b20bb18b465abe0","sha1":"88b427c2cf79636b41f578e5608dec454a2d7d3e","sha256":"e95d3246bc3757b46286221060b7346ea59fb6a9c94aa05f5eae7e7e09877d1b","sha512":"ea2e7df47e65f1a9675bcbd9c6628f44c66b60d13959647b93902090c36524f89b863caed4b98d300bb17b1d86d59674a7e7ec7f496df14c8215c2de32b467d2","ssdeep":"384:CPT48auPhcDdKW4iXns8CJJoCVWJWXkXJuxHn8+0pLvII67:CPRP+DdKlmWQbIr","tlshash":"3ab2628a1ce310724a53716d4f9fa54932328147194aed647e5c87581fe8b2f82fa3de","first_seen":"2026-02-13T07:56:43.422588Z","last_seen":"2026-04-15T09:12:13.516297Z","times_seen":20,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexuslabs.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexuslabs.email/assets/index-D1P-0ZxK.js","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:15.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexuslabs.email","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 09:07:56 GMT","end":"Mon, 13 Jul 2026 09:07:55 GMT"},"fingerprint":{"sha1":"2C:BE:55:37:BA:8F:65:AA:AE:19:12:19:7D:C2:9F:06:E6:C3:7F:0A","sha256":"FD:61:3C:38:98:59:51:AC:E2:EB:89:E2:9B:AB:6B:A1:EA:10:AC:E5:60:77:A5:ED:20:E6:90:BB:60:B0:76:F7"}}},"request":{"raw":"GET /assets/index-D1P-0ZxK.js HTTP/1.1\r\nHost: nexuslabs.email\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexuslabs.email/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Sun, 29 Mar 2026 17:57:44 GMT\r\ndate: Tue, 14 Apr 2026 13:34:15 GMT\r\netag: W/\"183352-19d3abe9dc0\"\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1586002,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (38994)","md5":"62e7548386331cca83ee266355192e30","sha1":"eb9bbeea965ad3b2e3b340669f105e7b541ffe3d","sha256":"20f7500bbb33e14abcc6d7d8c6afb377727c3ac1892f83c82c656a574595096c","sha512":"61f9e0e70cd669e12760463e5786504d72d80351c9beb5d876bc2992b6ff179716dde5ab711209f6dd2045ee33de72bca945f1bba743c69c109f9eb526e744ab","ssdeep":"24576:+VFcV57PM/Et7oHR4a48US9wpDVqMVEZrnJ0asPx:+VFcV57PeEt7oHR4a48US9wpDVqMVEZM","tlshash":"70257dd83198753546e345b0907f8207f13c2925b40d9450f129ede83ef998ab6bbfae","first_seen":"2026-04-14T13:34:45.754457Z","last_seen":"2026-04-14T13:35:13.452971Z","times_seen":2,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":524,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexuslabs.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexuslabs.email/assets/index-XUqXFqgJ.css","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:15.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexuslabs.email","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 09:07:56 GMT","end":"Mon, 13 Jul 2026 09:07:55 GMT"},"fingerprint":{"sha1":"2C:BE:55:37:BA:8F:65:AA:AE:19:12:19:7D:C2:9F:06:E6:C3:7F:0A","sha256":"FD:61:3C:38:98:59:51:AC:E2:EB:89:E2:9B:AB:6B:A1:EA:10:AC:E5:60:77:A5:ED:20:E6:90:BB:60:B0:76:F7"}}},"request":{"raw":"GET /assets/index-XUqXFqgJ.css HTTP/1.1\r\nHost: nexuslabs.email\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexuslabs.email/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:34:15 GMT\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nlast-modified: Sun, 29 Mar 2026 17:57:44 GMT\r\netag: W/\"21a96-19d3abe9dc0\"\r\ncontent-type: text/css; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":137878,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"aa56547a98a259d4f7c46d5413390059","sha1":"d48637a25510d58d0cb78c355836af291440a4bd","sha256":"3622c86dc08a24b07f4e420e78c16c9f6adbce580c76ed83a4697cad47af1db8","sha512":"0f963c11f023c4eefbd22b51061d147ac32a27b64d845bbe4f15cc6897fde49eb1c580d0669fec9f27a581e5498a4cf20e4ac2c296b756ede38623b10e4752b8","ssdeep":"1536:zzaBh5tkvEML2R0D7OYSPFACagSsMq+WDhzmAkX7zMMDt7HvK9e9tM988R988q:HaBh5tkk0DqYSPFAgMq+WDhKAj47Tn","tlshash":"04d392a0b129e53fbc6764f993ccf84c911ab0c1dd6943edfa16a12257c3bf26963604","first_seen":"2026-04-14T13:34:45.756835Z","last_seen":"2026-04-14T13:35:13.455883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":186,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexuslabs.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:16.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/orbitron/v35/yMJRMIlzdpvBhQQL_Qq7dy0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nexuslabs.email\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11800\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:57:34 GMT\r\nexpires: Sun, 11 Apr 2027 01:57:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 301002\r\nlast-modified: Thu, 04 Sep 2025 17:04:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11800,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11800, version 1.0","md5":"5d281085f7277a3ec9c7586dd2f24a13","sha1":"d686c7f2bfeb693a91baf3aaa3b6e70aa1a5bcc3","sha256":"c25a9f9da5d9f3db1bf2a01474722dc9b377675b7bbab6d0dfda6902794fd1ed","sha512":"7a31ed0d967a47d8f6135b5889c2af595b1ed3993ee3e2e2f522875e6384773b1f9f96ac891c068599580a543001443b1a1d565563a13010d40e1dbac4142220","ssdeep":"192:oufNGqi8O6lHWqR+OVLlB2AynsvBhJo/WO9UrApcn4UwLqJhPCGSlkeLlM:vCjKBBB250BhJol9UB48SeeBM","tlshash":"fc32c067623046e2fc22b53001fc4500466865bfd140f1bfd66349e7766e9606eb2a3e","first_seen":"2025-06-03T09:08:22.59014Z","last_seen":"2026-04-22T15:36:45.564605Z","times_seen":3746,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":81,"dns":1,"connect":7,"send":0,"wait":9,"receive":2,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexuslabs.email/api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:16.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexuslabs.email","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 09:07:56 GMT","end":"Mon, 13 Jul 2026 09:07:55 GMT"},"fingerprint":{"sha1":"2C:BE:55:37:BA:8F:65:AA:AE:19:12:19:7D:C2:9F:06:E6:C3:7F:0A","sha256":"FD:61:3C:38:98:59:51:AC:E2:EB:89:E2:9B:AB:6B:A1:EA:10:AC:E5:60:77:A5:ED:20:E6:90:BB:60:B0:76:F7"}}},"request":{"raw":"GET /api/trpc/auth.me?batch=1\u0026input=%7B%220%22%3A%7B%22json%22%3Anull%2C%22meta%22%3A%7B%22values%22%3A%5B%22undefined%22%5D%7D%7D%7D HTTP/1.1\r\nHost: nexuslabs.email\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexuslabs.email/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncontent-type: application/json\r\nvary: trpc-accept, accept\r\ndate: Tue, 14 Apr 2026 13:34:16 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"66bbd4885819692adc970633d13ebcc4","sha1":"4b257f0f5fce8e35a9a4bd1efea7d2dfe27b8525","sha256":"6578578485e8b3efa9586df2647cea5d7eb0e7fec6a0ae9be8002f1b86b36556","sha512":"7d20659c1a98395cb3fc5dff298da69a5331da589b2c6c2ace3a7f6d7d485569e65cdbd8518491af239a2993719d5996b257587c1bb66d6aa4f3574dabcb7f00","ssdeep":"","tlshash":"19800088bcc003080e28ce8aec00808283083a2a02288e2a00883a0082c803c3ab8a20","first_seen":"2023-06-03T07:14:51Z","last_seen":"2026-04-21T01:36:38.838415Z","times_seen":193,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexuslabs.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexuslabs.email/favicon.ico","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:17.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexuslabs.email","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 09:07:56 GMT","end":"Mon, 13 Jul 2026 09:07:55 GMT"},"fingerprint":{"sha1":"2C:BE:55:37:BA:8F:65:AA:AE:19:12:19:7D:C2:9F:06:E6:C3:7F:0A","sha256":"FD:61:3C:38:98:59:51:AC:E2:EB:89:E2:9B:AB:6B:A1:EA:10:AC:E5:60:77:A5:ED:20:E6:90:BB:60:B0:76:F7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nexuslabs.email\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexuslabs.email/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sun, 29 Mar 2026 17:57:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncache-control: public, max-age=0\r\netag: W/\"59d93-19d3abe9dc0\"\r\nx-powered-by: Express\r\ndate: Tue, 14 Apr 2026 13:34:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":368019,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35374)","md5":"979a0ebc98115dbc017885274ee60034","sha1":"b680765a93f49d62ad35bb51b999f203ffe6db7c","sha256":"9b8d7946aad1545bfc0122c84d0bd6bf4026f9c3210fa87ed8b1f116af3641c7","sha512":"5bb742856a92d344d8d8bd460a3b25627a6d333d9d51168aa4c653d0ff2a06a6cb44ffc210f2ba99e2a85c6a2eff212af48bd5edd4b2362efbde7dd6e7480943","ssdeep":"6144:7+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrtV:7rnxPOvyJZYLd","tlshash":"df748f98327915796ea302e6a0af6507b1383423b40d88b1f518fc756bf45972077faf","first_seen":"2026-04-14T13:34:45.76113Z","last_seen":"2026-04-14T13:35:13.465516Z","times_seen":2,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexuslabs.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:17.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 18:58:26 GMT","end":"Fri, 03 Jul 2026 19:55:55 GMT"},"fingerprint":{"sha1":"3B:93:AE:E6:AC:5A:A0:02:68:B2:D8:19:E9:85:C4:1A:34:5B:75:76","sha256":"44:51:10:6F:2E:B3:63:25:D4:87:0E:F6:CF:F8:77:BF:CF:FB:5B:B0:12:35:0E:88:73:15:F2:22:06:6D:56:DF"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexuslabs.email/\r\nContent-Type: application/json\r\nContent-Length: 246\r\nOrigin: https://nexuslabs.email\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 14 Apr 2026 13:34:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoOWN3p5%2FhL%2F8MVfRNCwBIFgyond2dxcKJdpELUkyo3hodlymyvhhgPc3XPI53xXKcm5hRBw9heoQjCrUw7xOto1qg5tX4w%2FoPlu6QnMR%2F9qP6Os6d%2Fvw0mCSQ9Gj4IcFduyb4y9\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3164cddf0783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"31f4459e6c165a8b5281846e04e8f4ac","sha1":"89819f4dcfd2d8b33e886fa5ef56f1a96fd07b96","sha256":"bd4fe3182edd92012058a1f1be60b03c72be9720c0cd54bb9311c729d0f96c63","sha512":"c6279ac21b8133d4b5ae7f7c12ed3dafb19131616f8f138c9b52ee66e4493b9d359e82a4460af0fe79083b23ea6b43a36b271a66c734dfd3235f6e03ccb4e0c5","ssdeep":"","tlshash":"71e0ab52a7996edfb9365a800d8814882ea95aa9bfb0102860a4c021c9f89db929f418","first_seen":"2026-04-14T13:34:45.763424Z","last_seen":"2026-04-14T13:34:45.763424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexuslabs.email/","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T13:34:14.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexuslabs.email","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 09:07:56 GMT","end":"Mon, 13 Jul 2026 09:07:55 GMT"},"fingerprint":{"sha1":"2C:BE:55:37:BA:8F:65:AA:AE:19:12:19:7D:C2:9F:06:E6:C3:7F:0A","sha256":"FD:61:3C:38:98:59:51:AC:E2:EB:89:E2:9B:AB:6B:A1:EA:10:AC:E5:60:77:A5:ED:20:E6:90:BB:60:B0:76:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexuslabs.email\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 14 Apr 2026 13:34:15 GMT\r\netag: W/\"59d93-19d3abe9dc0\"\r\nlast-modified: Sun, 29 Mar 2026 17:57:44 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":368019,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35374)","md5":"979a0ebc98115dbc017885274ee60034","sha1":"b680765a93f49d62ad35bb51b999f203ffe6db7c","sha256":"9b8d7946aad1545bfc0122c84d0bd6bf4026f9c3210fa87ed8b1f116af3641c7","sha512":"5bb742856a92d344d8d8bd460a3b25627a6d333d9d51168aa4c653d0ff2a06a6cb44ffc210f2ba99e2a85c6a2eff212af48bd5edd4b2362efbde7dd6e7480943","ssdeep":"6144:7+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrtV:7rnxPOvyJZYLd","tlshash":"df748f98327915796ea302e6a0af6507b1383423b40d88b1f518fc756bf45972077faf","first_seen":"2026-04-14T13:34:45.76113Z","last_seen":"2026-04-14T13:35:13.465516Z","times_seen":2,"resource_available":true,"data":null}},"time_used":955,"timings":{"blocked":390,"dns":14,"connect":177,"send":0,"wait":175,"receive":0,"ssl":182},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexuslabs.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/umami","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:15.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 18:58:26 GMT","end":"Fri, 03 Jul 2026 19:55:55 GMT"},"fingerprint":{"sha1":"3B:93:AE:E6:AC:5A:A0:02:68:B2:D8:19:E9:85:C4:1A:34:5B:75:76","sha256":"44:51:10:6F:2E:B3:63:25:D4:87:0E:F6:CF:F8:77:BF:CF:FB:5B:B0:12:35:0E:88:73:15:F2:22:06:6D:56:DF"}}},"request":{"raw":"GET /umami HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexuslabs.email/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 13:34:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Feb 2026 09:22:54 GMT\r\netag: W/\"a3a-19c27f639b0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xwE2DtB6NYBLWXcWga8Pvq%2BgnCLOlO05f7LAeie0tZHyhOdO95l%2FFoVjINfIMkD4dcacolTKWyaBf91ixp4dSvTPheD%2FE20RRq9RvIUruqGRM3Kc9FZY5u3b1IrJG9%2F%2FF3HYCRwO\"}]}\r\ncf-ray: 9ec316456afa723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2618,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2617)","md5":"72f32e397a4654c165924d8dd2113b1f","sha1":"23c3d68d3c03d544bb9a56ddcc9cd702f74613e4","sha256":"7eba89b02651cb67beefeb8aed5d39402f7994b226114c2c639ae354dc1a94f2","sha512":"35fb2163cff1af85d4133d6e791d867253eb213acaee98470a0e165f870951e50d23a83770e1ca42dafe3825b7ca73d92d329b73795a96168e084fde32a56b22","ssdeep":"","tlshash":"5d51f8f77281f0f13f7938d0c1b96224ba391e72b82f4091b6f91c4b8b0d9165131ea9","first_seen":"2025-09-23T15:56:30.742447Z","last_seen":"2026-04-22T09:39:23.206634Z","times_seen":334,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":27,"dns":7,"connect":1,"send":0,"wait":128,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:16.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nexuslabs.email\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 01:54:04 GMT\r\nexpires: Sun, 11 Apr 2027 01:54:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 301212\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-04-22T18:58:28.016349Z","times_seen":10211,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":150,"dns":3,"connect":27,"send":0,"wait":9,"receive":3,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"manus-analytics.com/api/send","fqdn":"manus-analytics.com","domain":"manus-analytics.com","tld":"com"},"ip":{"addr":"172.67.195.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:16.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"manus-analytics.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Apr 2026 18:58:26 GMT","end":"Fri, 03 Jul 2026 19:55:55 GMT"},"fingerprint":{"sha1":"3B:93:AE:E6:AC:5A:A0:02:68:B2:D8:19:E9:85:C4:1A:34:5B:75:76","sha256":"44:51:10:6F:2E:B3:63:25:D4:87:0E:F6:CF:F8:77:BF:CF:FB:5B:B0:12:35:0E:88:73:15:F2:22:06:6D:56:DF"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: manus-analytics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nexuslabs.email/\r\nOrigin: https://nexuslabs.email\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 14 Apr 2026 13:34:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self'\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nallow: OPTIONS, POST\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GK3%2BP0ojnsPM3XUDdPNOZZJe%2FBs8sI%2FUL9xb%2Fkmixs17XmNrknxmQCIf9Tmu26K95lW9Z5FUBrOLShOHlJ9pndH1bfLsOGbbQ6gPq8lqOuDuVvUy0TOSpMRK%2FeSDMaBUA5%2BNhOk4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3164b4dd4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T20:09:27.889983Z","times_seen":14074361,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":16,"dns":3,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexuslabs.email/__manus__/logs","fqdn":"nexuslabs.email","domain":"nexuslabs.email","tld":"email"},"ip":{"addr":"89.117.22.242","port":443,"asn":40021,"as":"NL-811-40021","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexuslabs.email/","date":"2026-04-14T13:34:18.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexuslabs.email","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 09:07:56 GMT","end":"Mon, 13 Jul 2026 09:07:55 GMT"},"fingerprint":{"sha1":"2C:BE:55:37:BA:8F:65:AA:AE:19:12:19:7D:C2:9F:06:E6:C3:7F:0A","sha256":"FD:61:3C:38:98:59:51:AC:E2:EB:89:E2:9B:AB:6B:A1:EA:10:AC:E5:60:77:A5:ED:20:E6:90:BB:60:B0:76:F7"}}},"request":{"raw":"POST /__manus__/logs HTTP/1.1\r\nHost: nexuslabs.email\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexuslabs.email/\r\nContent-Type: application/json\r\nContent-Length: 1717\r\nOrigin: https://nexuslabs.email\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sun, 29 Mar 2026 17:57:44 GMT\r\netag: W/\"59d93-19d3abe9dc0\"\r\ndate: Tue, 14 Apr 2026 13:34:18 GMT\r\ncontent-encoding: gzip\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":368019,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35374)","md5":"979a0ebc98115dbc017885274ee60034","sha1":"b680765a93f49d62ad35bb51b999f203ffe6db7c","sha256":"9b8d7946aad1545bfc0122c84d0bd6bf4026f9c3210fa87ed8b1f116af3641c7","sha512":"5bb742856a92d344d8d8bd460a3b25627a6d333d9d51168aa4c653d0ff2a06a6cb44ffc210f2ba99e2a85c6a2eff212af48bd5edd4b2362efbde7dd6e7480943","ssdeep":"6144:7+sP+2PnlHu2aoOvyJZtCN0NKw5q0yrtV:7rnxPOvyJZYLd","tlshash":"df748f98327915796ea302e6a0af6507b1383423b40d88b1f518fc756bf45972077faf","first_seen":"2026-04-14T13:34:45.76113Z","last_seen":"2026-04-14T13:35:13.465516Z","times_seen":2,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":158,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexuslabs.email","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}