{"report_id":"126d3aa9-6068-4562-a481-8a105fcf6ff2","version":6,"status":"done","tags":[],"date":"2026-06-04T19:42:06Z","url":{"schema":"http","addr":"nexusoniondark.live/","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"172.67.153.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexusoniondark.live/","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"title":"Nexus Market Links 2026 | Verify Mirrors \u0026 Onion (live)","dom":{"size":27828,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (508)","md5":"543918f00a401ace0caf3180eab3294d","sha1":"77bc752ba54e3392d3661dfa4a8c23628bbd40ac","sha256":"0c1f030c95255b13bafe9a4c8bd392de9477fd1185fd365b120e10536efdf109","sha512":"64e626be509da0ca8e830b81120ec0009b4a5c5ff7d842e3dd9b6374557173fb3c8465182df435ae13c21a3b66ed014e6b29440066b2835ea6fb9d1812b4f806","ssdeep":"384:hRR/WQRHmrKN/QMVwHbXqBXfLI7UfjxhXKFPuv/CbAxSdhLcrOAAuzE4bMe:RRX87UfjfKBc/CbAY6OHavMe","tlshash":"8ec2a4a3b4f638b3416342c355a7ab59bee1805bc589100072fe43dc5fead93ea5354e","dom_hash":"domhash37f16a8d7561932be395c32cb7f50b8f","first_seen":"2026-06-04T19:42:08.459604Z","last_seen":"2026-06-04T19:42:08.459604Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexusoniondark.live/","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"172.67.153.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-09T19:42:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexusoniondark.live","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-21T08:23:12.450061Z","last_seen":"2026-04-21T08:23:12.450061Z","alert_count":12,"request_count":6,"received_data":70897,"sent_data":2708,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexusoniondark.live/js/onion-links.js","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5faedddc9ca99bf46ffc12609441cff6","sha1":"f55ac271b536502e10f0e4bc6db726bc81f6a308","sha256":"d654f8247d0789cd3122430f4cd5844a7300c2bd2fbc8d3a9593e34c889ad0b9","sha512":"5f970813d23d59ee862d03789c7fac0b8d017c59e8c7053e4b21af58a7fb1bfdfa04ef3513273ac7133799b257232ea1f33e855523680f56efa2b798cb2d9781","ssdeep":"","tlshash":"7221892f22583a75c577a33ad73f8241f83261270c43ca11398ec5844fb0d2813b6ea8","size":1118,"data":"","first_seen":"2026-06-04T19:42:08.468792Z","last_seen":"2026-06-04T19:42:08.468792Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusoniondark.live/","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3eac4738584ec28ceba2099e9ffeccf8","sha1":"50af9ae327d39d5852e4eecd2847e0d303aac8dd","sha256":"4b3851347579539eec3537b309bbb0a0f53a270edfaee65f276d068c8d4156ae","sha512":"9f410dc93638511da748a4f57592382e08bdf57d93b28eb0aa2d1d9c9db7a50e1a04a43833a62a4d76b5de15038fa43f6ee11c341a2c6663d06a86c7a4276fd9","ssdeep":"","tlshash":"26e0263b6a852c72e6bb35eb62ae538836a40417be02c512189cc4906c28d52297e8d0","size":330,"data":"","first_seen":"2026-04-21T08:23:16.575877Z","last_seen":"2026-06-04T19:42:08.479017Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexusoniondark.live/","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-04T19:41:41.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusoniondark.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:14:06 GMT","end":"Fri, 17 Jul 2026 13:14:05 GMT"},"fingerprint":{"sha1":"EA:86:5A:B4:5B:14:51:1F:EB:D0:E7:45:A7:9E:9F:4D:48:F0:DF:C6","sha256":"0A:71:E7:8C:BB:18:B7:F7:2B:29:56:B1:D4:A5:08:D7:27:C2:32:1B:0C:06:9E:79:15:17:3B:72:58:EE:EB:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexusoniondark.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 04 Jun 2026 19:41:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 03 May 2026 17:08:05 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNj9qo4sDZW9mYGT6Tjm3fJinQpU5K9yq6j36N0n8Qz3va6BlsQSH37RtS7Jk1zZAsaeKPSr67x%2BldKcU49o6fTBYmnAzbwXI5T%2Bj4rEImIJ524cxIoRGCTMiqHzo2sqs3sOtbOT\"}]}\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: a0696a9fbeb035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28019,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (508)","md5":"547f74bab444e02aecd1d59b1bf5d37e","sha1":"a0daee10cb38e6443b66f8f4e91291288b5441d3","sha256":"daff7653f920e681c9d7726049c7290dfb5eb25ec490c84968774bae753a3fa4","sha512":"cd8ee4c7abd6197b52331f083aac5dc1902cbf6a190c639f3e5d1bb93dc08fcf73adb51a4c1843a9bef9c42936c3ac11cb439b36a7f20386e8878ba3926c3d09","ssdeep":"384:PRR/WQRHmrIN/QMVwHbXqBXfLI7UvjxhDKVPuoddWAuSdv/MiOYBuzE41M2:nHX87UvjrKJnddWAd5OWaxM2","tlshash":"32c2b3a2b4f638b3416381c39597ab59bee1805bc5c9000072fe47dc5fead93ea5354e","first_seen":"2026-06-04T19:42:08.464336Z","last_seen":"2026-06-04T19:42:08.464336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":33,"dns":17,"connect":1,"send":0,"wait":96,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusoniondark.live/css/style.css","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusoniondark.live/","date":"2026-06-04T19:41:41.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusoniondark.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:14:06 GMT","end":"Fri, 17 Jul 2026 13:14:05 GMT"},"fingerprint":{"sha1":"EA:86:5A:B4:5B:14:51:1F:EB:D0:E7:45:A7:9E:9F:4D:48:F0:DF:C6","sha256":"0A:71:E7:8C:BB:18:B7:F7:2B:29:56:B1:D4:A5:08:D7:27:C2:32:1B:0C:06:9E:79:15:17:3B:72:58:EE:EB:78"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: nexusoniondark.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusoniondark.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 04 Jun 2026 19:41:42 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 17:08:05 GMT\r\npriority: u=2,i=?0\r\netag: W/\"69f780f5-78c2\"\r\nexpires: Fri, 05 Jun 2026 19:41:42 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXigkCPkMghtoULVn3Lz2wbC8F%2BStVXFlFRHaLtXYE5q4CM0xsnBIaDek9TMrYwmyKwcPa3hUrqT%2B9TuIc4DIjCDAfbDG8EPWzj9HhWKM8a2Sadm58S6Hl2WjpWS2nWAaCcpKESk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0696aa1390f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30914,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (377), with CRLF line terminators","md5":"9fa452edd458ae7235939a8ce3f64d50","sha1":"2b2243ad220dc80205050ae4d9b92dce8fa5d565","sha256":"27033fcf1bcf01fa41b03fc9209409015b7529045c35c8af02d13e5b7ee09f31","sha512":"c9fa4a7f662067a4f4c368002b1849576bfad6a976422ab2a060e7e1ce61f4e0bd0d8752d3695b9e207d7e27c5643b577405a89e8d8d1ce8a6c40799d4b9e513","ssdeep":"192:dE5BCsWr5/emVGI6eR1D1+124zl3dzCz9gAA8OsfTOHuyYMsSHlPVzpYOm3JogBD:czeXJqnzdkW8BWdVNurB+xAll","tlshash":"05d2b7a9671561389533ab95fbd3d78cb3acb115990203bdbdc70048a3c93fd526af28","first_seen":"2026-06-04T19:42:08.465723Z","last_seen":"2026-06-04T19:42:08.465723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusoniondark.live/img/black-logo.png","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusoniondark.live/","date":"2026-06-04T19:41:41.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusoniondark.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:14:06 GMT","end":"Fri, 17 Jul 2026 13:14:05 GMT"},"fingerprint":{"sha1":"EA:86:5A:B4:5B:14:51:1F:EB:D0:E7:45:A7:9E:9F:4D:48:F0:DF:C6","sha256":"0A:71:E7:8C:BB:18:B7:F7:2B:29:56:B1:D4:A5:08:D7:27:C2:32:1B:0C:06:9E:79:15:17:3B:72:58:EE:EB:78"}}},"request":{"raw":"GET /img/black-logo.png HTTP/1.1\r\nHost: nexusoniondark.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusoniondark.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 04 Jun 2026 19:41:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 4297\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 17:08:05 GMT\r\npriority: u=4,i=?0\r\netag: \"69f780f5-10c9\"\r\nexpires: Fri, 05 Jun 2026 19:41:42 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlLBPMLPktVKZi6%2BHC72TDgBkBtFqYfHJntEok3JVkj9YYcF6cQaoSsDyuH7FaiVYH%2FWsQvQQNZTK6%2B01mubLOGG2xikph2fFNPhFyOeokmf1jvDeAfHE71var2Pxj1WsQ4C1YO3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0696aa1391a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4297,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 418 x 101, 8-bit/color RGBA, non-interlaced","md5":"1dd0f3ec136d06b851653f3eb266379a","sha1":"eadc31f050ef549b08ddcbbe228ae33d9345904c","sha256":"0ad781384a67dd23ec5ad6d492571f2ea5e7e3990feef399296a1ebcbb3278cb","sha512":"9780eea35c5ec71d7c9751b6342c882e98ca9117be7b462827607b8ac2491e3b9703929c78063d0d348073a2ad74258384c071f0722be79ed0391417c9040960","ssdeep":"96:K+bBj4pnzoYgffHs+Bsu3uVjjPAWQR6C5B3Az141:dbB4dKTBszQWrQy41","tlshash":"0f916d979c68266386c35706c1845bf221345c5333c1e8560a6288a2d7b7dfd9376bbe","first_seen":"2026-04-21T08:23:16.574623Z","last_seen":"2026-06-04T19:42:08.467549Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusoniondark.live/js/onion-links.js","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusoniondark.live/","date":"2026-06-04T19:41:41.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusoniondark.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:14:06 GMT","end":"Fri, 17 Jul 2026 13:14:05 GMT"},"fingerprint":{"sha1":"EA:86:5A:B4:5B:14:51:1F:EB:D0:E7:45:A7:9E:9F:4D:48:F0:DF:C6","sha256":"0A:71:E7:8C:BB:18:B7:F7:2B:29:56:B1:D4:A5:08:D7:27:C2:32:1B:0C:06:9E:79:15:17:3B:72:58:EE:EB:78"}}},"request":{"raw":"GET /js/onion-links.js HTTP/1.1\r\nHost: nexusoniondark.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusoniondark.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 04 Jun 2026 19:41:42 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 03 May 2026 17:08:06 GMT\r\npriority: u=3,i=?0\r\netag: W/\"69f780f6-45e\"\r\nexpires: Fri, 05 Jun 2026 19:41:42 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEZax%2Bst2gPXjhRXydwe%2BMgSW6tXKsB3f9eEHSJV%2FZ%2FWcjt%2B0wzJh9wm4FV1Sd1krfnKYmD3kind97v9UGZcHpMDNo7mdm%2BY3KGmUgSfEKMhIMCHU%2Fh1UdcEmdAhWBmAUMO6kh1E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0696aa1391e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5faedddc9ca99bf46ffc12609441cff6","sha1":"f55ac271b536502e10f0e4bc6db726bc81f6a308","sha256":"d654f8247d0789cd3122430f4cd5844a7300c2bd2fbc8d3a9593e34c889ad0b9","sha512":"5f970813d23d59ee862d03789c7fac0b8d017c59e8c7053e4b21af58a7fb1bfdfa04ef3513273ac7133799b257232ea1f33e855523680f56efa2b798cb2d9781","ssdeep":"","tlshash":"7221892f22583a75c577a33ad73f8241f83261270c43ca11398ec5844fb0d2813b6ea8","first_seen":"2026-06-04T19:42:08.468792Z","last_seen":"2026-06-04T19:42:08.468792Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusoniondark.live/img/favicon.ico","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusoniondark.live/","date":"2026-06-04T19:41:42.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusoniondark.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:14:06 GMT","end":"Fri, 17 Jul 2026 13:14:05 GMT"},"fingerprint":{"sha1":"EA:86:5A:B4:5B:14:51:1F:EB:D0:E7:45:A7:9E:9F:4D:48:F0:DF:C6","sha256":"0A:71:E7:8C:BB:18:B7:F7:2B:29:56:B1:D4:A5:08:D7:27:C2:32:1B:0C:06:9E:79:15:17:3B:72:58:EE:EB:78"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: nexusoniondark.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusoniondark.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 04 Jun 2026 19:41:42 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 03 May 2026 17:08:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=300\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQM2cipC28HIRYg7AtF608bHwR%2Bnn2WUy1TV%2FiWKh%2BQZc7tmWiNxncgeDqcdJaqoVpm38cvOJhdrORrA%2FWb7fTeY5OenfxyMwWy9vHh0jXc%2BMyjvE8CDTOAn9kWChgiHhH5A9%2BOq\"}]}\r\netag: W/\"475-650ecdb8e0027\"\r\ncontent-encoding: br\r\ncf-ray: a0696aa25d741a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1141,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"bc44ff7e5d92e82309cd88e59480ab80","sha1":"a8df35c3bfa619a62f30c46834a87d781e245c47","sha256":"fed0447c44e09cb664ae12adce50ada2d9f977b5ecf8fa7118634c4babea984a","sha512":"a733525133c64e2398edb6dc193ed880807a93f1c0bc0eb3c1712624b5247eb01d34dc34874ec64bc0e3fa0fa32ecf67aec70c760eb0e5a59c0eb3c77eb5ea39","ssdeep":"","tlshash":"b921a3dd60eb12fcdaa84563ab1d431279c9da45da2f405a01a6e2c40084a6eb9a8873","first_seen":"2026-04-21T08:23:16.570789Z","last_seen":"2026-06-04T19:42:08.47163Z","times_seen":3,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexusoniondark.live/img/favicon.ico","fqdn":"nexusoniondark.live","domain":"nexusoniondark.live","tld":"live"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusoniondark.live/","date":"2026-06-04T19:41:42.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusoniondark.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 13:14:06 GMT","end":"Fri, 17 Jul 2026 13:14:05 GMT"},"fingerprint":{"sha1":"EA:86:5A:B4:5B:14:51:1F:EB:D0:E7:45:A7:9E:9F:4D:48:F0:DF:C6","sha256":"0A:71:E7:8C:BB:18:B7:F7:2B:29:56:B1:D4:A5:08:D7:27:C2:32:1B:0C:06:9E:79:15:17:3B:72:58:EE:EB:78"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: nexusoniondark.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusoniondark.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 04 Jun 2026 19:41:42 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 03 May 2026 17:08:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ejhF0mJs5q5u53EUzUQBAteZIlCHjhRVCOa8RhnDTOZKukytP7bpVYPiUQ9DoQiuWUkHKYq41SdKDWE1DZBNuxC6VrV67JnIV1fzU9H4friwlxYrulTWmbq0xCYaB1QLz4WWxMj\"}]}\r\netag: W/\"475-650ecdb8e0027\"\r\ncontent-encoding: br\r\ncf-ray: a0696aa25d711a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1141,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"bc44ff7e5d92e82309cd88e59480ab80","sha1":"a8df35c3bfa619a62f30c46834a87d781e245c47","sha256":"fed0447c44e09cb664ae12adce50ada2d9f977b5ecf8fa7118634c4babea984a","sha512":"a733525133c64e2398edb6dc193ed880807a93f1c0bc0eb3c1712624b5247eb01d34dc34874ec64bc0e3fa0fa32ecf67aec70c760eb0e5a59c0eb3c77eb5ea39","ssdeep":"","tlshash":"b921a3dd60eb12fcdaa84563ab1d431279c9da45da2f405a01a6e2c40084a6eb9a8873","first_seen":"2026-04-21T08:23:16.570789Z","last_seen":"2026-06-04T19:42:08.47163Z","times_seen":3,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-04","alert":"Sinkholed","trigger":"nexusoniondark.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}