{"report_id":"35686a91-a863-4421-b1f3-4e2df2e5ff2a","version":6,"status":"done","tags":[],"date":"2025-10-18T08:31:42Z","url":{"schema":"http","addr":"carder.market/","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":0,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"carder.market/","fqdn":"carder.market","domain":"carder.market","tld":"market"},"title":"Carding Forum for Professional Carders"},"submit":{"url":{"schema":"http","addr":"carder.market/","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":0,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-22T08:31:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-10-18","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"i.postimg.cc/NM6RMrz5/cczauvr.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null},"summary":[{"fqdn":"pic-cc.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-14","domain_rank":4267511,"first_seen":"2021-01-29T10:55:05Z","last_seen":"2025-09-29T05:31:42.277289Z","alert_count":0,"request_count":6,"received_data":25831454,"sent_data":2633,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":7,"received_data":213081,"sent_data":3846,"comment":"","tags":null,"fingerprints":null},{"fqdn":"carder.market","ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"domain_registered":"2023-09-13","domain_rank":1358403,"first_seen":"2019-01-25T20:06:47Z","last_seen":"2025-09-28T11:40:33.010979Z","alert_count":0,"request_count":28,"received_data":1156288,"sent_data":14593,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"XenForo","description":"XenForo is a PHP-based forum hosting program for communities that is designed to be deployed on a remote web server.","website":"https://xenforo.com","common_platform_enumeration":"","icon":"XenForo.png","categories":["Message boards"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fernandogoods.pro","ip":{"addr":"172.67.220.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-28","domain_rank":0,"first_seen":"2025-07-08T03:06:33.822178Z","last_seen":"2025-09-29T05:31:42.352588Z","alert_count":0,"request_count":1,"received_data":2763843,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-10-13T03:37:54.688797Z","alert_count":0,"request_count":4,"received_data":13256739,"sent_data":1742,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"46.105.222.162","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2025-10-13T01:59:42.631878Z","alert_count":1,"request_count":3,"received_data":6867632,"sent_data":1326,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":686,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"carder.market/js/xf/preamble.min.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5311fffb5759ce42c8794ad3d0ed1154","sha1":"402a0fdb087e193ce34eb16815940009d62123b6","sha256":"b436fcb2277e73f40246e07ee2ae54db8581d67a0ef83e37c85593167116c477","sha512":"267cb90d3d1f24e0765be99c8e2dc7b75d1874cea15a574479eb432104921198b5ada051f79b015d98d4533e655538acd820444a97131f73dc713b672d605030","ssdeep":"","tlshash":"b5810aa873b7bb3aa35e1ffe92b9820370139154f25404544a1f9d387e50da310e7ae5","size":3936,"data":"","first_seen":"2025-02-08T18:52:15.11587Z","last_seen":"2026-04-04T00:47:47.879527Z","times_seen":3340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"419003362a0456699fc96f724569f062","sha1":"cec62c48f14361a960c698dd709b66442dc052cd","sha256":"1b2bc94a1ac5efb7d93edfa471d92f65e9e6b8e6346b9edb68c62437cc0b99d4","sha512":"a24ea9331e512dfe9fdf7c8f257c398f0eff22604fbec58cecf6b04bb96845184e440869e2bb47409bfe731f0ed3bbdcf62526186a60af86634c442d44004d67","ssdeep":"96:tqDYnYP9elNwp1/Rfqv0EXMYMLw3FvMhEEh4KS09kY2d6I:tqDG2UTk/QvHMLw3FUhE84Kta5","tlshash":"b8c16486975c15a38ff5930e7c2eaec3ab1c61b685b530fef1ac545e37e9406118f812","size":5865,"data":"","first_seen":"2025-10-18T08:31:51.343205Z","last_seen":"2025-10-18T08:31:51.343205Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5e56704caadd3a098144a3cbb515469","sha1":"b86116a0ae5631cb601806193c27c8bf5f326d77","sha256":"d12c2f55c9e692c2198b03fe0c2a23e9e437c67b2562f2ee9914069148ce37c1","sha512":"54827275e30daaaf8bd697698f402fb9cfc4ad71f19e081d3c92a79d268c57bfd225308a74f8d5ad4b843a71547eff5e6bde6021445507c92fd0baf3169bc7ec","ssdeep":"","tlshash":"45c08c18078c0a4344ab425cbf5ad28e82dc1453e44280b901ccb02b208000a4bc6dca","size":164,"data":"","first_seen":"2025-06-28T17:48:13.49141Z","last_seen":"2026-03-24T01:08:51.356417Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"df75456e8d6ef65bc796c9247a3678b8","sha1":"3a7f55857a688b2baa7b2eeda2592428d344e7a3","sha256":"bc9709761a11d0797d16b6ca422fdc5f7fdeb90d3d9ee1d15cb383ad26fb7018","sha512":"8044f154ab22fe7943a53fae977e5aee41d012b2f1c3ff2597fa8f79f5c4ac6c53615cc695fcf209264ea05d7f392b3cef77b65504bd2c44781c1e965ed51000","ssdeep":"","tlshash":"6080000022ac300282038a2832c8020c2220a80322a0028aa208f0022aa80220c8f888","size":28,"data":"","first_seen":"2025-09-18T10:54:40.885672Z","last_seen":"2026-03-15T13:49:59.356651Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/js/xfmg/slider.min.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0a126cde3cacae1b2b5dcbf0ba3f311","sha1":"2b32d4ccc5e16b1dd7ebcf177835216bfcbf9bad","sha256":"229200bac843657a8da40e302220065006e6c67c3b89bd9f5a48bdbe340863d0","sha512":"8976233e13b2c58a641ff8320906f05369d7f351f0d8e1de36318f0ff3b042c1e096f26e8bd397e94e686d96642e3bb64d9dc43aa72e35c9b0b1c43c8314a2a7","ssdeep":"","tlshash":"ae0112b1808267a640f7767a9285ba4df2946492f087405ff2a98be9f4384439373ad4","size":829,"data":"","first_seen":"2024-08-25T03:44:14Z","last_seen":"2026-03-15T13:49:59.320538Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/js/vendor/vendor-compiled.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c1b842a3777eb2b50ca92bd1f39a09a","sha1":"757304e881079ebdae0c3d87a5e7144b8f5c89d0","sha256":"40370aee49c7a9cde80f64b5d8373f1bfe3c3de64f855cec1e8ef1afb3767f24","sha512":"0999469622994a6952b8be896ad770d5ac15dd49b4805cc77556de4e00b51c02daaa89d82ff00a2b27722ae65e28fe376b3614603bc0928bcad4bb3b892f9f42","ssdeep":"384:dFpjUrUcq5Yg4DPAoJniWDO2tovroi/nGLX:WhiSY9I","tlshash":"9b6295a57b86353543b70db2940f4607a3396a7986ac84e1e6a0e1e81cf584d07efb3d","size":14681,"data":"","first_seen":"2024-05-23T19:25:54Z","last_seen":"2026-04-04T00:47:47.880149Z","times_seen":3775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/js/xf/core-compiled.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"936d69c857bf741dbd1d702df323fba5","sha1":"9255e072115f04ef4cb390dad9cf03e0adceeaca","sha256":"2d9890cc3a597a292386bec00f54601bdfabda703b4396d96c6a738fe7580957","sha512":"de6183f7b5069fc3781610802445e8ddb70e5833086480f5f09b2cb6518a35edcbb8aacb330aaaedc852726ab7381d31dd598002b06453443fe4e4fde337bf1c","ssdeep":"3072:Rz3ZtQazh2wuKp5Yp99Rp7MhvTdCUh36zLVurzwmPuiEdrAwBRp2L7CHOHSW1HGS:7z/d5mGt6zMrzwmPnErbBqfHSWRGS","tlshash":"ca043a8176522a7782df01eec0650681b2318ae7f585c4fcbd7cdfea5598e8221b7b70","size":176369,"data":"","first_seen":"2025-02-23T15:50:37.04625Z","last_seen":"2026-03-29T03:18:19.361555Z","times_seen":936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/js/xf/carousel-compiled.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1abb27b7bde2a2dd8ffd2018b3c6279a","sha1":"0f5f0133a2a4c20c02c706aa97328c8aca18bf28","sha256":"10461daccb0762b5b5a03b2cfa9fc0ee7615435043cc61de64266dce3bbaf821","sha512":"862011059d13e0e84833c1aa614dda8a87cecaa9f1e65b39e6edcf0429c6f4ae4138619eee35956a1a461d81eb1a91e5781a4d17976918d8d09a7fce103a2e1c","ssdeep":"768:h1CbMy0CwIrQKRejGWGol0v8GPosZWxwC0IfAQP6rO4n2D0H74bZvLehcTsDtEc0:TPAq0NoZTxHW1t8wTKN7FCJL4DRo6","tlshash":"7c73f6623359797691f6c6ca50124200f336b5983006e0ec76bdddd75e8a88a31fef7a","size":76584,"data":"","first_seen":"2024-08-11T11:03:04Z","last_seen":"2026-03-28T07:48:12.903587Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"pic-cc.com/pikcha/money-club-big.gif","fqdn":"pic-cc.com","domain":"pic-cc.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-cc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 07:05:47 GMT","end":"Tue, 25 Nov 2025 08:04:14 GMT"},"fingerprint":{"sha1":"1D:B6:9D:CC:55:71:D6:92:98:C6:5D:4E:8B:F3:1A:BB:39:D3:88:EC","sha256":"E6:B7:07:25:A2:9C:D4:F0:81:C3:A0:FC:5F:8A:F3:48:FB:45:BB:F9:DA:FB:8E:03:10:FB:86:F2:DF:3A:16:B7"}}},"request":{"raw":"GET /pikcha/money-club-big.gif HTTP/1.1\r\nHost: pic-cc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 9524467\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Oct 2023 23:47:58 GMT\r\netag: \"654040ae-9154f3\"\r\naccept-ranges: bytes\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nage: 216914\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsqBO4Sc7Lo3FPM20SwqUw1a6BHqKUfrYSRYWv6catsaL8zVP5%2B1JeE7E3N%2BpokqJc4YEhdWxLGkJFs%2FzxLdGm6s2JdzpBE7nRU%3D\"}]}\r\ncf-ray: 9906adb7fb73c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9524467,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1400 x 120","md5":"88349706f91e5d56bdeb34c350b563b9","sha1":"4559a3571f1e2a07419dc27c5bb3625c61591bf1","sha256":"1db2cf9147579097e40141f1c932a20eebff572ed6b814b04bb397fe0d34726b","sha512":"91538f8c55cf8da37347a4a4c6fa266e933626f2bf1a71876a729132ab9428596f42801b41f4a72dc81f4e086b518e46d35821dcfa2b1867303943800cc0400f","ssdeep":"24576:r90PCqt5EcyBRCHbti0NItCHTmV/GXV3GVtjdg28U0K:r6tC5+Hbt/zmVuXV3mdg28UD","tlshash":"812533669672011a1f459f68c7a135f2f70d6c4843af836dbc2e2a33114251aa7dbfec","first_seen":"2025-09-24T12:00:18.266109Z","last_seen":"2025-10-19T09:55:00.712612Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3628,"timings":{"blocked":320,"dns":3,"connect":29,"send":0,"wait":8,"receive":2963,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://carder.market\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 18:55:24 GMT\r\nexpires: Tue, 13 Oct 2026 18:55:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 394555\r\nlast-modified: Mon, 08 Sep 2025 18:08:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-04T03:35:24.799647Z","times_seen":56150,"resource_available":false,"data":null}},"time_used":3068,"timings":{"blocked":1488,"dns":31,"connect":31,"send":0,"wait":17,"receive":2,"ssl":1486},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/154/154663.jpg?1754136828","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/154/154663.jpg?1754136828 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:18 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1208\r\nLast-Modified: Sat, 02 Aug 2025 12:13:48 GMT\r\nConnection: keep-alive\r\nETag: \"688e00fc-4b8\"\r\nExpires: Sat, 18 Oct 2025 09:31:18 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1208,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 48x48, components 3","md5":"5083f4582f72f3d923ab7f6431dad4e2","sha1":"e5b5888e09003d60667ef082fae2fb03ff661b6b","sha256":"1a3294a40d88ad3f60ac7f211e78994650cfc04d7f9360d6ddaf13d26ace9717","sha512":"388d826e66b9715bf9f052baf1ebfbeea97887a8875530dd9323ad910e1da74172199a3e7be06e59e0d2c6bddf64c9a25758c2815170fcfb9d04289d02a2a9f9","ssdeep":"","tlshash":"8721ca8a07546c64e81f287c47f690620f015240f422ce8f6df7d2a07bdc4c5494804a","first_seen":"2025-10-18T08:31:51.119473Z","last_seen":"2025-10-18T08:31:51.119473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":103,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/145/145847.jpg?1684939906","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/145/145847.jpg?1684939906 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1609\r\nLast-Modified: Tue, 19 Sep 2023 20:45:14 GMT\r\nConnection: keep-alive\r\nETag: \"650a085a-649\"\r\nExpires: Sat, 18 Oct 2025 09:31:19 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1609,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 48x48, components 3","md5":"2890c465caf71e919ea2ad57a1001a3d","sha1":"35cbccbb9f58813053228883e6a4ac39e37711a9","sha256":"e35c1ef8c8b435bd5202a2d6cd59333fd0ed507bc138c895cbfe911159ffc4ab","sha512":"c433ae855cb6cc64974374d6058bf527fb9867322b146eab0948dd5ead684f429cb695f492c63acf02297904eb92e3bb31f7adce892dc49078e3efd998ae1086","ssdeep":"","tlshash":"ee310a1ec75ac3608c1fa96bd69c3399f25e914434d27e3c5d71878abb95cc0848c45d","first_seen":"2025-09-24T12:00:18.311339Z","last_seen":"2025-10-19T09:55:02.390602Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1294,"timings":{"blocked":1166,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/136/136198.jpg?1633961518","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/136/136198.jpg?1633961518 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2186\r\nLast-Modified: Tue, 19 Sep 2023 20:42:28 GMT\r\nConnection: keep-alive\r\nETag: \"650a07b4-88a\"\r\nExpires: Sat, 18 Oct 2025 09:31:19 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2186,"size_decoded":0,"mime_type":"image/jpeg","magic":"GIF image data, version 89a, 48 x 48","md5":"d04e3f5805f709f83940025c87f02717","sha1":"38535bc5a9e4c05133859326e65e59ced4acdfae","sha256":"65d0c10c0376365f7c428951f813491544069e7580931218943691ce930dcbbf","sha512":"7a90eff693bde16c650da54989d6eeb6817855b5bbc7a5f21ec09717001a2a54aff4cc2536c28ea7c4d13bfd435507c98567cb51aea40cf34795e72645ac064f","ssdeep":"","tlshash":"76412b033e8ad386e54d2c328c9a4357f48853573b99533d7088274bcee2d444e9a21d","first_seen":"2025-10-18T08:31:51.128393Z","last_seen":"2025-10-18T08:31:51.128393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1292,"timings":{"blocked":1163,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/183/183230.jpg?1760408615","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/183/183230.jpg?1760408615 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5190\r\nLast-Modified: Tue, 14 Oct 2025 02:23:35 GMT\r\nConnection: keep-alive\r\nETag: \"68edb427-1446\"\r\nExpires: Sat, 18 Oct 2025 09:31:19 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5190,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"95fcaf6651afb71535b99229958ac051","sha1":"0bbfbf1fd15eb6ce86d613671313b866bf507205","sha256":"ff11293cd6faceef9e753a1eebffcd5ec99a3475cb2872dbbb9b5ee2e2719a36","sha512":"63407cc218d08f91f849a743fc4b67864062343d19ac65eafcfb6220b2c9d60d60ebd7e5a91c71315cdaa0e5fd692d4617fbafcbe38e44ae556212fa47da30c0","ssdeep":"96:XI7+rFI0YAyg/uZtl2osHMaa2dJ1tV+SBmxzgm8YiOQ0U6pZqQa7ceF/K:XI7AyOessahR+OmGbYi+qzpK","tlshash":"1bb17dfd445448be28e6f4b6896081124e0546e76c4fb4f3d990bb6c42d3cd9f94554b","first_seen":"2025-10-18T08:31:51.13276Z","last_seen":"2025-10-19T09:55:04.804986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":1160,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T08:31:16.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: private, no-cache, max-age=0\r\nX-XF-Debug-Stats: {\"time\":0.3343,\"queries\":21,\"memory\":7.97}\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nSet-Cookie: xf_csrf=2b5UTGR2nT1A0PHm; path=/; secure\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"XenForo","description":"XenForo is a PHP-based forum hosting program for communities that is designed to be deployed on a remote web server.","website":"https://xenforo.com","common_platform_enumeration":"","icon":"XenForo.png","categories":["Message boards"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":264739,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (500)","md5":"9bfb50ce0742bdbbd79be4bfb79b91d8","sha1":"b25f130a2bedbedc3c825cdd4576864df2c10c20","sha256":"e1e59cfcefea071bc46784432d25d30f05a5cd9744b89063bbcc2cb487fb632e","sha512":"0988c6546fcbe9a3fb4ff5db0cdd806db18508b655ef64210bb83cd505f54b7e1d235fff8173b01d1eee9ee3fd6d4a8e9874e61a887e8966a9d1c7a251a9d0fb","ssdeep":"3072:9dujwpAe0nJP3ZN4ibEZOlaBjhsKx8XNO88Pb+QIRVWPICDfm:9dacfm","tlshash":"0144635064cd5d7b011703e36928bb4871ffae71d5aa00e6f5b309bd8ec2da2b98e057","first_seen":"2025-10-18T08:31:51.150562Z","last_seen":"2025-10-18T08:31:51.150562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":159,"dns":14,"connect":67,"send":0,"wait":479,"receive":68,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/173/173887.jpg?1731085788","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/173/173887.jpg?1731085788 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:18 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1628\r\nLast-Modified: Fri, 08 Nov 2024 17:09:49 GMT\r\nConnection: keep-alive\r\nETag: \"672e45dd-65c\"\r\nExpires: Sat, 18 Oct 2025 09:31:18 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1628,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 48x48, components 3","md5":"9d02d31b532ecd897a8be29a8e207321","sha1":"5aac942701e21f9df57783b8deb0dcf3841b95b2","sha256":"b228a0b5347253a278d908698310176f15d49d185e21e2d5404affcbd6c081d5","sha512":"5c8307aec26f2fd6764d37e020243ecd374260733fe16b97f9f0bc40085d7b7ac1089a5dec93d68febff4f67e2d18a9b3298ae5220d84f9d6200c72bb4c1b410","ssdeep":"","tlshash":"1a31b61953749e6fd05d2a7c05e07fdfcf426e2596a49d1780854235af38c814c1c887","first_seen":"2025-10-18T08:31:51.156237Z","last_seen":"2025-10-18T08:31:51.156237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":501,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/favicon.png","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:19.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:20 GMT\r\nContent-Type: image/png\r\nContent-Length: 2221\r\nLast-Modified: Tue, 19 Sep 2023 18:51:52 GMT\r\nConnection: keep-alive\r\nETag: \"6509edc8-8ad\"\r\nExpires: Sat, 18 Oct 2025 09:31:20 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"f00311a0dd747489984e5b10982efa72","sha1":"744bcd1fb570eb83a0a59aeea1ff7188120c0829","sha256":"d0da0642abd27b72e307806907fc02084f2f9ef5809922577e48949b719209e1","sha512":"71f96ee8d13867c37dc4eacc4e02c9784fded2df77c9f1133369c0ba490f5c61a9fc16f6efa94d2177823c6a50b626b7c4230f12b84613a5494436fedff41d72","ssdeep":"","tlshash":"3a412b94afc693dca593dc435e331c54a2ffa069723a63cff28142bec5ba51680103e5","first_seen":"2025-09-18T10:54:40.857954Z","last_seen":"2026-03-15T13:49:59.284517Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":1040,"dns":0,"connect":0,"send":0,"wait":659,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/js/vendor/vendor-compiled.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /js/vendor/vendor-compiled.js?_v=ab1ec289 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 04 Apr 2025 11:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67efc893-3959\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14681,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11789)","md5":"8c1b842a3777eb2b50ca92bd1f39a09a","sha1":"757304e881079ebdae0c3d87a5e7144b8f5c89d0","sha256":"40370aee49c7a9cde80f64b5d8373f1bfe3c3de64f855cec1e8ef1afb3767f24","sha512":"0999469622994a6952b8be896ad770d5ac15dd49b4805cc77556de4e00b51c02daaa89d82ff00a2b27722ae65e28fe376b3614603bc0928bcad4bb3b892f9f42","ssdeep":"384:dFpjUrUcq5Yg4DPAoJniWDO2tovroi/nGLX:WhiSY9I","tlshash":"9b6295a57b86353543b70db2940f4607a3396a7986ac84e1e6a0e1e81cf584d07efb3d","first_seen":"2024-05-23T19:25:54Z","last_seen":"2026-04-04T00:47:47.880149Z","times_seen":3775,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":133,"dns":1,"connect":71,"send":0,"wait":78,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/assets/logo_default/carder-logo.png","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/assets/logo_default/carder-logo.png HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 4101\r\nLast-Modified: Fri, 04 Apr 2025 12:19:15 GMT\r\nConnection: keep-alive\r\nETag: \"67efce43-1005\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4101,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 204 x 35, 8-bit/color RGBA, non-interlaced","md5":"83771fbec2b2f4a69d0a90fa25e1967d","sha1":"cecd2cf92fd8e84f8c7dfc27044bce875b64d900","sha256":"04ab8b19248b50574b111e39e36236d5904350351db284555f7b2b4f14cf547c","sha512":"b80006a90c76dfe41d1af3a877ff95e13a8a920ea11fb96a14004e1cfb558f5b318d36380ccead1970e18df7869cfc749cb1125197a34654f7d9b10f10f25550","ssdeep":"96:CSHYkknmWqbOO4/nI9AZNfXfzL2yHMHbHADg2HAkuIE3z67Fz4l3HcbbZY:CS4kkn0nyzs7gngwE37l38bbZY","tlshash":"1281b75ef921ac109656df05aef9b0572b7b2f9092d09441becd58470ce01f9cc0e6da","first_seen":"2025-09-18T10:54:40.869024Z","last_seen":"2026-03-15T13:49:59.310519Z","times_seen":13,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":326,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fernandogoods.pro/ferbannerbig.gif","fqdn":"fernandogoods.pro","domain":"fernandogoods.pro","tld":"pro"},"ip":{"addr":"172.67.220.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fernandogoods.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 17:43:01 GMT","end":"Sat, 10 Jan 2026 18:40:33 GMT"},"fingerprint":{"sha1":"2F:51:AC:7F:4F:32:84:0A:F1:EF:FB:08:0A:BC:34:74:31:10:E2:F4","sha256":"7A:C1:D0:4F:2F:04:D0:0B:9B:6B:DE:08:BC:26:3D:39:59:4E:F0:F9:C1:38:B0:6E:DE:5E:6F:D4:A7:AA:C4:23"}}},"request":{"raw":"GET /ferbannerbig.gif HTTP/1.1\r\nHost: fernandogoods.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2763151\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 18 Feb 2025 07:47:57 GMT\r\netag: \"2a298f-62e65dbf36540\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F1E5z%2FxFHIKE%2BEaYWZzzU%2BqiRDW7iCD%2BckJYlm%2Fv4jxXukREjBQ2woeQe%2FX10FhEq6xt1W8hbiv3k4cYSd8WIPRzKZe0IbByiOGLYe609w%3D%3D\"}]}\r\ncf-ray: 9906adb75ad85693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2763151,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1400 x 120","md5":"7a5bf5e99d6aa56963699211f4ef7f9d","sha1":"bc85335de0ba7430adb052b626d8c4d3018ca326","sha256":"d4370dc8f4ea8d943b61e90b279a77604c344e4026f3f0b794722a595a81bfab","sha512":"d6af78b147ef66a0430ae0876422dcc799605f327b9d1ce04bc7186d57c8e097b0260ec7aed96287facad36d6bc3ee8383520e6f9662ff80fe55222a281ef327","ssdeep":"24576:grKPBvtmXXwj0KEUK2bInsrv5KGYnhxyryS:grEvBvVFdUGOcyS","tlshash":"7325332ccd2c91d0695f93fd4deb256d23652560b328cb2285d47065a7ef1b8bee038e","first_seen":"2025-09-24T12:00:18.30386Z","last_seen":"2025-10-19T09:55:03.616924Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1280,"timings":{"blocked":321,"dns":2,"connect":28,"send":0,"wait":124,"receive":595,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic-cc.com/pikcha/topgame.gif","fqdn":"pic-cc.com","domain":"pic-cc.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-cc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 07:05:47 GMT","end":"Tue, 25 Nov 2025 08:04:14 GMT"},"fingerprint":{"sha1":"1D:B6:9D:CC:55:71:D6:92:98:C6:5D:4E:8B:F3:1A:BB:39:D3:88:EC","sha256":"E6:B7:07:25:A2:9C:D4:F0:81:C3:A0:FC:5F:8A:F3:48:FB:45:BB:F9:DA:FB:8E:03:10:FB:86:F2:DF:3A:16:B7"}}},"request":{"raw":"GET /pikcha/topgame.gif HTTP/1.1\r\nHost: pic-cc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1222666\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 29 Nov 2023 05:28:32 GMT\r\netag: \"6566cc00-12a80a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nage: 2121075\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvJ%2BjTmxaQMRYL1X7t0%2Fr4gOYZHz6P6BU4RhgHGhqhMq7hXrcm54pNN4liZY9hfPVzFk0XX3CTceqd2EBALk8BH6wxtUZFO8%2F2Q%3D\"}]}\r\ncf-ray: 9906adb7eb4dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1222666,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1400 x 120","md5":"2a83a10a9373722ef00f4ca1bc7fe327","sha1":"26279cc775dcade9caa1a8ce4e4c9eca6fecd80f","sha256":"2e1309ac7f35948bf95eeb37950bf8f3121d8899344647e7ad0d4ed83e274ed8","sha512":"a2c4745b185475cca5fae9de88f78364f8a843ef066a9de60ce9315cd7f53a24ea2b0bc008f12217d313fe3eb3f9229a62cf20453c0b7255651974d8d9b231e3","ssdeep":"24576:Nmkt7P5WCmkC7MI32nssi5LsfWys8XYLv5yJyfN0EKLvTQgQU:NmkRekCLj5oOJ9QJy0TQS","tlshash":"c92523060d5cdf8563e668a47d1f8b84cb26953a496ac230e9d7fa2577f32fd68c1404","first_seen":"2025-09-24T12:00:18.307093Z","last_seen":"2026-03-27T22:59:49.694553Z","times_seen":13,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":314,"dns":3,"connect":29,"send":0,"wait":8,"receive":75,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://carder.market\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 378821\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T03:45:50.364076Z","times_seen":713688,"resource_available":false,"data":null}},"time_used":1347,"timings":{"blocked":545,"dns":0,"connect":14,"send":0,"wait":17,"receive":230,"ssl":537},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/151/151389.jpg?1726027895","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/151/151389.jpg?1726027895 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:18 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1601\r\nLast-Modified: Wed, 11 Sep 2024 04:11:35 GMT\r\nConnection: keep-alive\r\nETag: \"66e11877-641\"\r\nExpires: Sat, 18 Oct 2025 09:31:18 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 48x48, components 3","md5":"1d335e617d7faf4871132244cce957d3","sha1":"a5c8bf876291034d19bd897552f02a9486a9bc20","sha256":"e9782c0e55ef2460ec82319b982c989b4c3c6cd262579bc9fac794b52451579f","sha512":"19bb82df7330eb53dace88acec39e7588a57d9799f12e47e66013de4671723d295d94b1108c9942a368ed92bec3cda7768a0a83e11464f75e13fc44b6dd82506","ssdeep":"","tlshash":"ac31e5398903c837ee3e99bf19148bd9ea140fa40230185fc84187a1333a8b82ec016c","first_seen":"2025-10-18T08:31:51.190257Z","last_seen":"2025-10-19T09:54:59.845864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/143/143225.jpg?1638758229","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/143/143225.jpg?1638758229 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1636\r\nLast-Modified: Tue, 19 Sep 2023 20:43:36 GMT\r\nConnection: keep-alive\r\nETag: \"650a07f8-664\"\r\nExpires: Sat, 18 Oct 2025 09:31:19 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1636,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85\", baseline, precision 8, 48x48, components 3","md5":"1448f3ece1eba260459596db58ab48e8","sha1":"37c2c4fae69674f0c1c9f0a62ff7dc89f127ab4c","sha256":"ab767216533ed074f555db562fe7fb4ef97e329ce93a2d07e7eed337e4fff9a9","sha512":"3e2dc3b6c0bca0115af475cb612975e4b08acc3b17003c42bb70b39cc68388e3273dcbbb9c91e95e61622ed37245b6e65d6d8ecf3a7a3597b9f7ac881dd28e37","ssdeep":"","tlshash":"ec31ea9b4ad10324d83f81a75798246fd18941c23e549a027bb697a6a3318ecd60c4ec","first_seen":"2025-10-18T08:31:51.195412Z","last_seen":"2025-10-19T09:55:04.683194Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1292,"timings":{"blocked":1164,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/183/183235.jpg?1760424551","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/183/183235.jpg?1760424551 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 806\r\nLast-Modified: Tue, 14 Oct 2025 06:49:11 GMT\r\nConnection: keep-alive\r\nETag: \"68edf267-326\"\r\nExpires: Sat, 18 Oct 2025 09:31:19 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":806,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 48x48, components 3","md5":"c507b80698eabe29178dc48c279ff2f8","sha1":"64319b9adde61c00fb53eb9beb311578ad8c5b99","sha256":"045d12e3b19dfb494e967ac56d93f0e5ab59c386c467bef66b495e2658a3e707","sha512":"b3adfeb39eedb36c6c2022e63cb62b22f7ccd86af6a12354ff6780bc02f617478679754b92e7bbacff1122dea7e760ddb6a5cddc958f5f909963d6923cd193ee","ssdeep":"","tlshash":"4101604a5ead8ce2fa2d8c316297b2f6471a59010da2085c4ca698047b37ccded00122","first_seen":"2025-10-18T08:31:51.198917Z","last_seen":"2025-10-19T09:55:03.738206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":1162,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less\u0026s=3\u0026l=1\u0026d=1760476894\u0026k=ea51f44bc366997dfd2a245e0006363c63dcffa0","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less\u0026s=3\u0026l=1\u0026d=1760476894\u0026k=ea51f44bc366997dfd2a245e0006363c63dcffa0 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":282124,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3200)","md5":"3782d39d66b3b158ab19962408b6b0ba","sha1":"2e43bcb9c18dcbb3b90bafca97c36a71a1b86646","sha256":"dcac471588073ad8432e799fbbbb1e3d2b46fa43dfdeaf83b5eaf45781b7337d","sha512":"7296c9edc51d8cccaa14c756828dab5a92638022de94a4eb5d35d2b51a5a246c634eb082f0eab7f9075dbc80ed097fc8e50e27ef92543257098049844844c841","ssdeep":"6144:iR4+QR68Qk8cjOJD9ZuGKc54IYeQ1c4v+L3ciP:iR4+QR68Qk8cjOJD9ZuGKc54IYf1c4vo","tlshash":"a354c7d977b21b40215bc428b943a710b72c8102d11efda8ead4a4ec9fcc9d5dab7787","first_seen":"2025-09-18T10:54:40.848909Z","last_seen":"2026-01-30T12:27:47.205728Z","times_seen":9,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/js/xf/core-compiled.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /js/xf/core-compiled.js?_v=ab1ec289 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 04 Apr 2025 11:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67efc893-2b0f1\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":176369,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (591)","md5":"936d69c857bf741dbd1d702df323fba5","sha1":"9255e072115f04ef4cb390dad9cf03e0adceeaca","sha256":"2d9890cc3a597a292386bec00f54601bdfabda703b4396d96c6a738fe7580957","sha512":"de6183f7b5069fc3781610802445e8ddb70e5833086480f5f09b2cb6518a35edcbb8aacb330aaaedc852726ab7381d31dd598002b06453443fe4e4fde337bf1c","ssdeep":"3072:Rz3ZtQazh2wuKp5Yp99Rp7MhvTdCUh36zLVurzwmPuiEdrAwBRp2L7CHOHSW1HGS:7z/d5mGt6zMrzwmPnErbBqfHSWRGS","tlshash":"ca043a8176522a7782df01eec0650681b2318ae7f585c4fcbd7cdfea5598e8221b7b70","first_seen":"2025-02-23T15:50:37.04625Z","last_seen":"2026-03-29T03:18:19.361555Z","times_seen":936,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":143,"dns":0,"connect":70,"send":0,"wait":138,"receive":165,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/js/xfmg/slider.min.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /js/xfmg/slider.min.js?_v=ab1ec289 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 04 Apr 2025 11:55:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67efc8cf-33d\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":829,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (525)","md5":"e0a126cde3cacae1b2b5dcbf0ba3f311","sha1":"2b32d4ccc5e16b1dd7ebcf177835216bfcbf9bad","sha256":"229200bac843657a8da40e302220065006e6c67c3b89bd9f5a48bdbe340863d0","sha512":"8976233e13b2c58a641ff8320906f05369d7f351f0d8e1de36318f0ff3b042c1e096f26e8bd397e94e686d96642e3bb64d9dc43aa72e35c9b0b1c43c8314a2a7","ssdeep":"","tlshash":"ae0112b1808267a640f7767a9285ba4df2946492f087405ff2a98be9f4384439373ad4","first_seen":"2024-08-25T03:44:14Z","last_seen":"2026-03-15T13:49:59.320538Z","times_seen":27,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Vpkykdfc/900x70.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /Vpkykdfc/900x70.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2475378\r\nlast-modified: Sat, 17 May 2025 22:39:14 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2475378,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 900 x 70","md5":"73c60b01bb33074d71f85c0a85c13807","sha1":"d76209f95b416dcae1d5afa4d3b2b8e6f9b35750","sha256":"4e39f69c4ccb12e18a11bf13ad52ad149663ea243213d45b22784d7ea68007a8","sha512":"407f7ed8db82862fead646438ea677f0a9af26975b84e559b5acdc41045fb9f8c61ac4372b8d0e19c65edc9d76b0a7e3e2782bcf566450a3233ec5e6039241e4","ssdeep":"24576:myjXU9ivpXrvX4Et+z/g163dyJbht8XFtBVxTKoEVlElK/Z:7QivpXrPE//tAbhwzPtpoJZ","tlshash":"45253394e9f909520c39441f0faf25378da548a70f9bd4fa7982bf82455873c386fe89","first_seen":"2025-09-24T12:00:18.263625Z","last_seen":"2026-03-15T13:49:59.324062Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2279,"timings":{"blocked":325,"dns":2,"connect":94,"send":0,"wait":179,"receive":1515,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/zhb9PGGM/0758302234.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /zhb9PGGM/0758302234.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 7709522\r\nlast-modified: Tue, 24 Jun 2025 04:26:13 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7709522,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1500 x 130","md5":"465b978a43fd80c932019e7b4605b08b","sha1":"20a2703cc6eaef8f04c93b856698e5b1543092c5","sha256":"3e8c72cb373be50eec3f7abbb4d7762ab7f2b932a0548059617535bcbaf745b0","sha512":"103e1452946d1d1de97b9fd80b2fc62713478a2a058451f21d8c7aac908449dc1527a8e4b13d2095e5d3983bc414ff6db9ef9552fed7bcc92d429e43efa33de5","ssdeep":"24576:7bG725lLjR2355MXgqat7UkOOUblMmYqjCxZzCQWv:7jNo8QVo5lRYqmuQk","tlshash":"442533c0930d5a267a367bf22d0ae2e300a0f841349a650eb733a96151678e657dffdd","first_seen":"2025-09-24T12:00:18.271988Z","last_seen":"2026-02-03T13:32:50.345851Z","times_seen":7,"resource_available":false,"data":null}},"time_used":4314,"timings":{"blocked":323,"dns":2,"connect":94,"send":0,"wait":186,"receive":3552,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/fzMS4RjF/1300.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /fzMS4RjF/1300.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2308410\r\nlast-modified: Sun, 10 Aug 2025 23:14:42 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2308410,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1300 x 50","md5":"f16160e4e7f4da53e353b709b6baf614","sha1":"d2b5cce098919f337c89146c8a4ff555084d33ca","sha256":"1f757c163bc355c7fdd7161bfad746e0e2f2100ee7fe4e47a8f51e2f38bf3012","sha512":"0c31b12e2e78a5b2136b997d688c74c07d0b9a02bfbf6b0fdd407fde8fe21687dc6ab61e1a94d06aeed58d4991ec0c7317ddb4349f49424f13ec48531331e50a","ssdeep":"24576:bbpOJbioDsIb9yfoDRa/z3BnoYfTcifm1xCIcKJEQ/l:bSbtZbdlIzfgGIaql","tlshash":"5625239ad2d91ab8651b8c8d514eaffe24edc108a1f0533686b7fde0690d939703dd0d","first_seen":"2025-09-24T12:00:18.319215Z","last_seen":"2025-10-19T09:55:04.358372Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2186,"timings":{"blocked":318,"dns":2,"connect":94,"send":0,"wait":24,"receive":1599,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/zDL5FhTp/936x120.gif","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.162","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /zDL5FhTp/936x120.gif HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 999645\r\nlast-modified: Sun, 14 Sep 2025 04:27:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":999645,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 936 x 120","md5":"09471534eaba6fe81ac8ffe153e21347","sha1":"ccf618b760ba676a7d40d7a425118d88b1f5974c","sha256":"ea5a8ccdbbfaaca6a12bad1b60d319fb994b90792264a53e4c5b8b004899036f","sha512":"5addc4f881b6f71c01d0aa88b18880db0a9184975c9ef4f3612f634f3ca4630de94c2cd8e484c1ccdca41ee5d551708a741a1279189df59a25e5472bc3adbbc9","ssdeep":"12288:RPwO8wBOqvhWnbK77RLfDM49uv2j7pK60GQfQBDeE0wdHDvgkKM+2H1FqkivRGSE:RPbzXlA41pKDy8EjdjYbMpD0ZGhJXMG","tlshash":"1125334bc9a37a05feb5379f5949a5495fbe79380cc29b1abe0fc40830828dc9539937","first_seen":"2025-10-18T08:31:51.231826Z","last_seen":"2026-03-15T13:49:59.344794Z","times_seen":6,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":108,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic-cc.com/pikcha/b1ack-1400.gif","fqdn":"pic-cc.com","domain":"pic-cc.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-cc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 07:05:47 GMT","end":"Tue, 25 Nov 2025 08:04:14 GMT"},"fingerprint":{"sha1":"1D:B6:9D:CC:55:71:D6:92:98:C6:5D:4E:8B:F3:1A:BB:39:D3:88:EC","sha256":"E6:B7:07:25:A2:9C:D4:F0:81:C3:A0:FC:5F:8A:F3:48:FB:45:BB:F9:DA:FB:8E:03:10:FB:86:F2:DF:3A:16:B7"}}},"request":{"raw":"GET /pikcha/b1ack-1400.gif HTTP/1.1\r\nHost: pic-cc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 08:31:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 793743\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 02 Oct 2024 09:25:40 GMT\r\netag: \"66fd1194-c1c8f\"\r\naccept-ranges: bytes\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nage: 1192750\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFsZH4jcLuauWJnAV%2BtEjSKfrrcAPu3C1OZ52%2FETitjRsDaYzpV4%2F08crRtPHGRpVsqn7FMyaNQzh%2BEKtU3PiF89SKv87v63VK4%3D\"}]}\r\ncf-ray: 9906adbafaadc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":793743,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1400 x 120","md5":"03446875816c405f895768023b7de55e","sha1":"b96e0d86861befc97030af943d72a866401e0d7a","sha256":"f55780c401d5125dfae536a6057401fd8afcb40b8bddc39f3e7a3a1c55da9186","sha512":"7274b3c28aa487c022062c87bab528d9184ef8bc00a1103de10d58200e52ac5c5b17fa4cd75eb282ddac0c8a2cd818d884f36c7aa2cccf87c5e4903b966dd67f","ssdeep":"24576:mlM6RPRAA3XJ6sMI07yeOs/LXwr5NghEOAI:yfZRp/Ar6ghb7","tlshash":"70f4337fdb7a5c7994c61af514059cc42a09369eedd70ba38c3ee79305402ae34ac8de","first_seen":"2025-09-24T12:00:18.274659Z","last_seen":"2025-10-19T09:55:05.438641Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1306,"timings":{"blocked":315,"dns":3,"connect":29,"send":0,"wait":17,"receive":151,"ssl":696},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/local/icons/solid.svg?v=1760476895","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/local/icons/solid.svg?v=1760476895 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Tue, 14 Oct 2025 21:21:35 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68eebedf-169c9\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b4ceb05b59a23f3c8b27a94c2bd8068","sha1":"60048dc618a8cd308313d18191dbb33db23e7a2a","sha256":"0f02c0532d105f5dd576a011577d30daf39eb320dd3c26ed8aec012a2c5d71f0","sha512":"8ca5ea81d7a22866c3f3150782fb4af77a7ce799a7a00b59d8983d983059a5c761392a257a5cfcc1a489beea173e34480b1d921c3b37f3287c0b6bf9d5c9ec0e","ssdeep":"1536:/cPcQMg2s++BG/gY81H/JXcv37OGIhRCjJ1B35Ra:0P4g2s+IG/RrJmRCjJ1B3C","tlshash":"8493b679d7a8b7bc09868375472410b86a8f9abe72d05234666dc7e03b4f1ecd6c79c0","first_seen":"2025-09-18T10:54:40.852014Z","last_seen":"2026-02-19T20:53:03.252184Z","times_seen":11,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/js/xf/preamble.min.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /js/xf/preamble.min.js?_v=ab1ec289 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 04 Apr 2025 11:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67efc893-f60\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3936,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (515)","md5":"5311fffb5759ce42c8794ad3d0ed1154","sha1":"402a0fdb087e193ce34eb16815940009d62123b6","sha256":"b436fcb2277e73f40246e07ee2ae54db8581d67a0ef83e37c85593167116c477","sha512":"267cb90d3d1f24e0765be99c8e2dc7b75d1874cea15a574479eb432104921198b5ada051f79b015d98d4533e655538acd820444a97131f73dc713b672d605030","ssdeep":"","tlshash":"b5810aa873b7bb3aa35e1ffe92b9820370139154f25404544a1f9d387e50da310e7ae5","first_seen":"2025-02-08T18:52:15.11587Z","last_seen":"2026-04-04T00:47:47.879527Z","times_seen":3340,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":134,"dns":0,"connect":64,"send":0,"wait":77,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/js/xf/carousel-compiled.js?_v=ab1ec289","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /js/xf/carousel-compiled.js?_v=ab1ec289 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Fri, 04 Apr 2025 11:54:59 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67efc893-12b28\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76584,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1abb27b7bde2a2dd8ffd2018b3c6279a","sha1":"0f5f0133a2a4c20c02c706aa97328c8aca18bf28","sha256":"10461daccb0762b5b5a03b2cfa9fc0ee7615435043cc61de64266dce3bbaf821","sha512":"862011059d13e0e84833c1aa614dda8a87cecaa9f1e65b39e6edcf0429c6f4ae4138619eee35956a1a461d81eb1a91e5781a4d17976918d8d09a7fce103a2e1c","ssdeep":"768:h1CbMy0CwIrQKRejGWGol0v8GPosZWxwC0IfAQP6rO4n2D0H74bZvLehcTsDtEc0:TPAq0NoZTxHW1t8wTKN7FCJL4DRo6","tlshash":"7c73f6623359797691f6c6ca50124200f336b5983006e0ec76bdddd75e8a88a31fef7a","first_seen":"2024-08-11T11:03:04Z","last_seen":"2026-03-28T07:48:12.903587Z","times_seen":98,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":143,"dns":1,"connect":74,"send":0,"wait":135,"receive":8,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic-cc.com/pikcha/trump-cvv-big.gif","fqdn":"pic-cc.com","domain":"pic-cc.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-cc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 07:05:47 GMT","end":"Tue, 25 Nov 2025 08:04:14 GMT"},"fingerprint":{"sha1":"1D:B6:9D:CC:55:71:D6:92:98:C6:5D:4E:8B:F3:1A:BB:39:D3:88:EC","sha256":"E6:B7:07:25:A2:9C:D4:F0:81:C3:A0:FC:5F:8A:F3:48:FB:45:BB:F9:DA:FB:8E:03:10:FB:86:F2:DF:3A:16:B7"}}},"request":{"raw":"GET /pikcha/trump-cvv-big.gif HTTP/1.1\r\nHost: pic-cc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 08:31:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5737823\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 30 Oct 2023 16:52:09 GMT\r\netag: \"653fdf39-578d5f\"\r\naccept-ranges: bytes\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nage: 1192751\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qznXdRXfJST3PEHxNGZ5OswbSv0D97xkBUHiuvE5%2FKtNAaFwG2MGpGm4LXwyBJ%2B%2FLKqqo4J2GNIWcYw%2BiMHPSkDGhx%2BFE2F67E%3D\"}]}\r\ncf-ray: 9906adbafa9ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5737823,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1400 x 120","md5":"3b8b9277d501f537c02ef974f89e3423","sha1":"f49e9c17f8ce2ecce2c76c95aa37733b42c1bb14","sha256":"cd345bada5e9539e08a452af327556ba2f8ca75ccdf934bcac7153953b5e8b00","sha512":"aed41a0af931b210f3cc323e4d3d059bfb24775a9837ebc2a3343217e4a0c8ea98b7d78bf97f8ed310fb6ce8dc20b90585352074bb6b8ecd9fdd208b883bbaa6","ssdeep":"24576:xs7oNO2/31zFJ5OatCbRS3ztheh6wej+E/SrTFHUbVWAGWaB:xs09F+a6Gveh6fj+E/8TabVWAeB","tlshash":"472533b6f17c361bf1e53517f8f07fcd2420e5a823aa801e4bd671a91686478503aabd","first_seen":"2025-09-24T12:00:18.286961Z","last_seen":"2025-10-19T09:55:05.192611Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2092,"timings":{"blocked":321,"dns":3,"connect":14,"send":0,"wait":7,"receive":943,"ssl":767},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/NM6RMrz5/cczauvr.gif","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.162","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /NM6RMrz5/cczauvr.gif HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4262967\r\nlast-modified: Thu, 19 Sep 2024 18:19:28 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4262967,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 468 x 60","md5":"af7f77488c142716de2188dbc32e32bd","sha1":"b7c785a9e57a1b17814d72193914412579ff4edf","sha256":"df4d8abdab162cf388f916bf03a46646a875ac7d00f193d8b46f2cda51951f67","sha512":"ac99148ea284a155d2cbcff25b8896059271ed232727a88bbf006ab66665c1ca59154524ab89d138c06b0ad93d92de75256ef20201797db81e69a03d1ee93b18","ssdeep":"24576:aktGluCJ713znJ8+vlYf/rJAlW5WKVLpcKFiLxN1:aQG7Z7Jn9YfTJA4PitN1","tlshash":"4625238f99318edc4af01cbc4a9f87de06d83d66275973f98e5ede0062927395e12341","first_seen":"2025-09-24T12:00:18.326923Z","last_seen":"2026-03-15T13:49:59.34594Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":103,"dns":53,"connect":25,"send":0,"wait":26,"receive":931,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2025-10-18","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"i.postimg.cc/NM6RMrz5/cczauvr.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://carder.market\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 12:53:30 GMT\r\nexpires: Tue, 13 Oct 2026 12:53:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 416268\r\nlast-modified: Mon, 08 Sep 2025 18:08:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-04-04T02:46:06.731534Z","times_seen":18055,"resource_available":false,"data":null}},"time_used":2536,"timings":{"blocked":984,"dns":1,"connect":45,"send":0,"wait":545,"receive":3,"ssl":633},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://carder.market\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22796\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 12:53:30 GMT\r\nexpires: Tue, 13 Oct 2026 12:53:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 416268\r\nlast-modified: Mon, 08 Sep 2025 18:08:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22796,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22796, version 1.0","md5":"40ee6416c01f7a00cb9e1c3cef551f68","sha1":"dff6282f80563c09ed0d584f15fdc0fc0078731f","sha256":"c06ca3fcbc5f7c37ebb7c86a69502009911ecd8183811bae02f9b1fbb0541ddb","sha512":"6293ab4181cce6ae2140852417a8d81131e5a52d93637d994bb17e9f4d93452b17da6da06617c92e490c35ebd6b3b6f14489d09573a7ff9e7c07731c92710c82","ssdeep":"384:hY6ouPRl620of01sAAPBVW+5W9WS/wt6uOYGTervhySpK07Iu0TDR:hY6ouLJMAPBVFDS/M6renpv7Itx","tlshash":"aca2e0a9894cd4c3d12bcbb416518e9112ae5b8149510e276dd4e5ce9ceefebe0fc80b","first_seen":"2025-01-09T02:03:52.091649Z","last_seen":"2026-04-04T02:46:06.731534Z","times_seen":18055,"resource_available":false,"data":null}},"time_used":1504,"timings":{"blocked":724,"dns":1,"connect":43,"send":0,"wait":29,"receive":1,"ssl":637},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/160/160981.jpg?1716993726","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/160/160981.jpg?1716993726 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:18 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 682\r\nLast-Modified: Wed, 29 May 2024 14:42:06 GMT\r\nConnection: keep-alive\r\nETag: \"66573ebe-2aa\"\r\nExpires: Sat, 18 Oct 2025 09:31:18 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 48x48, components 3","md5":"9c30566ecb06dd013a75395fc449d190","sha1":"890be8d6de3648b439e57a5112c9af46c8565f9b","sha256":"29f0523c53dd121c4be126132cb63e549fa07ca8b2f083507cb4ee123456ddf6","sha512":"ff558b722524d1cac9000d232442e075fbaa43f5e515f42524f9ca9042d7a156707c232a3422f62ae76dba31a6fbbab0096abd7393a29fde07397416c7ad3130","ssdeep":"","tlshash":"290162eb170de526e72e2673c125b6f283070e4a26350e6d498314142f3fca44b008a1","first_seen":"2025-10-18T08:31:51.267902Z","last_seen":"2025-10-18T08:31:51.267902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/8gHG2N3R/468x60.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:17:47 GMT","end":"Sun, 16 Nov 2025 07:17:46 GMT"},"fingerprint":{"sha1":"30:62:E2:16:F0:8D:8F:C4:30:EF:67:44:60:2F:45:29:D1:5B:AF:94","sha256":"EE:AB:93:C9:6B:44:94:94:F6:EE:CA:98:DE:CE:BF:A6:25:9F:C8:76:A5:43:59:77:38:DD:D2:23:F7:9C:B1:70"}}},"request":{"raw":"GET /8gHG2N3R/468x60.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 761970\r\nlast-modified: Sat, 29 Mar 2025 12:17:28 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":761970,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 468 x 60","md5":"09504c1842c6795dad4f7f245bfe9927","sha1":"ba13ec63c8f5f89c26b9f8f73216d609d282c08d","sha256":"dd3b7e36e0255bf74af02945e937643b5845bffc2163dae9dc5cc8c6fa6af83f","sha512":"4ebba10653d706af420843254962d07e2c90c87f89ae0ddb69d7501e6b2b1e6d8be7696e11824bb8ac9ca68aa8304c7d6793b7310556526080f9c34a878b19e4","ssdeep":"12288:wZOPDqTAgeMH7/zSb1pDzsYyccp95+dECENeidJSNcumOmc+ogbV1a0UXoBJeLxf:UOLOeM/2rDzADp95YONxfRXto0GzO4L1","tlshash":"94f4231bd05391bdf7602128f6be0785143fb4af52c7aae71c578483345a8a9f1bb623","first_seen":"2025-09-24T12:00:18.337478Z","last_seen":"2026-03-15T13:49:59.293227Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1413,"timings":{"blocked":312,"dns":2,"connect":94,"send":0,"wait":173,"receive":662,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/styles/fa/solid/caret-down.svg?v=5.15.3","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /styles/fa/solid/caret-down.svg?v=5.15.3 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less\u0026s=3\u0026l=1\u0026d=1760476894\u0026k=ea51f44bc366997dfd2a245e0006363c63dcffa0\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 04 Apr 2025 11:55:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67efc895-150\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":336,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e371739ead5be10038e8e68dfd7ee71","sha1":"e8c76453a3657b9a5e03b08f7664927e6e564ae4","sha256":"c646a34e33db483f472aaa93b45a1c8a572233816bedabd17b01dc94b48ec457","sha512":"a15fde5e84d01bd0e106fa50a64097b99ea12e147a0109ef47a87ac693276b4c163779168b26b42a9c634a8a9c124e1de693adfa8b52cc0613990119431f00fc","ssdeep":"","tlshash":"c1e0262e8f9a5a615ad002713c586a7da86634d828a8d7cde6921006b151aa660f06f8","first_seen":"2024-05-23T19:25:55Z","last_seen":"2026-04-04T00:47:47.895342Z","times_seen":3631,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/styles/fa/solid/search.svg?v=5.15.3","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /styles/fa/solid/search.svg?v=5.15.3 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less\u0026s=3\u0026l=1\u0026d=1760476894\u0026k=ea51f44bc366997dfd2a245e0006363c63dcffa0\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 04 Apr 2025 11:55:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67efc895-232\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":562,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3790d1a8a5ab8e6fe3f39ea05997d85a","sha1":"358a37cc43d97b5418659da3aa1978020159bf63","sha256":"460384b541ca0cb805dcbdd991fa2d74f144a55398ed64aae8d556d3709e0479","sha512":"73a65595c6870dc488d7b173c8fd6babf7579b06205324ded220e8c83953ef94b156236ee539a41198dc89100e50c4a8e170416d056fceaae134a1dd4c6d43f4","ssdeep":"","tlshash":"46f0c01fa69410dd5f6247e52e0c617cfe1e208614bc0785d4c68265534355ab0b1f59","first_seen":"2025-09-18T10:54:40.88158Z","last_seen":"2026-03-15T13:49:59.302212Z","times_seen":13,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/styles/fa/solid/cog.svg?v=5.15.3","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /styles/fa/solid/cog.svg?v=5.15.3 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/css.php?css=public%3Anormalize.css%2Cpublic%3Afa.css%2Cpublic%3Acore.less%2Cpublic%3Aapp.less\u0026s=3\u0026l=1\u0026d=1760476894\u0026k=ea51f44bc366997dfd2a245e0006363c63dcffa0\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 04 Apr 2025 11:55:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67efc895-403\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1027,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37ea96ce1bd98509cedb02d79fe6b27a","sha1":"6ddc1aa9aaf848d1bdc627cdc8d6a9105e690516","sha256":"de529ccd7e74179253a2305ddc0fa25c3ad6ddba198eb8ef84adc7026518c2c8","sha512":"1b662adedd02428274b4aff7fe72da0669971fdb4b033a8a93d379e18d9eb31e4862811f559ebc7b0bf30a4da61ff9936b353a730555808bcdd3915338dedafc","ssdeep":"","tlshash":"9d11ef5cc34497f04ec9177daa342878de4f41eea4e87238895a95d1b1610f871d4dce","first_seen":"2025-09-24T12:00:18.290677Z","last_seen":"2026-03-15T13:49:59.351878Z","times_seen":8,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/158/158921.jpg?1714776614","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/158/158921.jpg?1714776614 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:18 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1129\r\nLast-Modified: Fri, 03 May 2024 22:50:14 GMT\r\nConnection: keep-alive\r\nETag: \"66356a26-469\"\r\nExpires: Sat, 18 Oct 2025 09:31:18 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 48x48, components 3","md5":"8dbe88ce15245ad1a9242e11621f08e6","sha1":"2bb91917ba89a4d80d2395c60d54d56cd9fe9649","sha256":"cf27ea203107f322f376c3579f291e06dea87c66ac6dce460f18e106eaa77e9a","sha512":"96dcc3ae8edeb3fbaa88e17014fa02e991b3082f641ded175f62dd9d181a76a51f6932f0ad839cf6cb2c014313efbe2d74ba910dc302ce403b276dd71a417d93","ssdeep":"","tlshash":"5921b5be8e15d023fd6d81345197bbfc1c90365109164e9ce8818d78bf2b0d6fd62410","first_seen":"2025-10-18T08:31:51.291438Z","last_seen":"2025-10-19T09:55:01.216753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/146/146564.jpg?1760339315","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/146/146564.jpg?1760339315 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:19 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1022\r\nLast-Modified: Mon, 13 Oct 2025 07:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"68eca573-3fe\"\r\nExpires: Sat, 18 Oct 2025 09:31:19 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 48x48, components 3","md5":"569f4ac406f6bfd4622e7822256e3078","sha1":"c24667bbad818490a9ddd83ddbf23d7ec9429ffb","sha256":"a266335fc57c1d733b7ee4da13ba8412ebd08a41dd8850f2871016ba3be59b7d","sha512":"2993d0d84b2271792277162f15ede130b3543902a0f5b585ffec1d14c6c4025312e23c1ac525e14799ef549f6c4cfa01fa342f05190914b248fa8485c09d45a8","ssdeep":"","tlshash":"5e11848aa946eb45cd3d0c328506e28952a51b70a8a11f461dc99ae97b7ec20f42a503","first_seen":"2025-10-18T08:31:51.296042Z","last_seen":"2025-10-18T08:31:51.296042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1292,"timings":{"blocked":1164,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/02GVLkrg/carder-market.gif","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.162","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 Aug 2025 02:47:56 GMT","end":"Sat, 15 Nov 2025 02:47:55 GMT"},"fingerprint":{"sha1":"20:6C:66:66:68:F7:B4:5E:C5:99:09:F7:0A:73:95:2A:A3:88:22:EF","sha256":"A5:63:1D:6D:11:2D:26:7C:BE:F7:F6:A9:F4:F8:3E:22:50:5C:25:D9:66:3A:A5:C5:08:CC:5C:C7:9E:29:4E:ED"}}},"request":{"raw":"GET /02GVLkrg/carder-market.gif HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1603926\r\nlast-modified: Fri, 18 Apr 2025 21:19:49 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1603926,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1280 x 110","md5":"f7b0e15863f26dd7d32d6652f6846606","sha1":"b2f706a9d38f758031fcb69828624ba36d03f67e","sha256":"f1c188a5c1fe70bea37221f3a423686431ba377e5bd6358d73bf406498da07f8","sha512":"14bcbf02cea966497ad6c16d82c2b1b79ceecf74b4a92beffba1db25090b87070fce129e41fa96b6455d8a0f31e52a0446167137f54bbcc4de9eb2318b4c54b4","ssdeep":"24576:b/PyxfgDWdDPnasbDpjhSBLgv6tFNog32DY0FK3QEZ:exfggPnaw1tSBCGFCqlFZ","tlshash":"d325236fc621ca0afd951aab9c3f47d9ddb8c8b11b64d4421820b95b1e41bbef00cc79","first_seen":"2025-09-24T12:00:18.331859Z","last_seen":"2026-02-26T20:38:21.48461Z","times_seen":7,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":61,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic-cc.com/pikcha/castrocvv.gif","fqdn":"pic-cc.com","domain":"pic-cc.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-cc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 07:05:47 GMT","end":"Tue, 25 Nov 2025 08:04:14 GMT"},"fingerprint":{"sha1":"1D:B6:9D:CC:55:71:D6:92:98:C6:5D:4E:8B:F3:1A:BB:39:D3:88:EC","sha256":"E6:B7:07:25:A2:9C:D4:F0:81:C3:A0:FC:5F:8A:F3:48:FB:45:BB:F9:DA:FB:8E:03:10:FB:86:F2:DF:3A:16:B7"}}},"request":{"raw":"GET /pikcha/castrocvv.gif HTTP/1.1\r\nHost: pic-cc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3375747\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 08 Apr 2024 09:39:43 GMT\r\netag: \"6613bb5f-338283\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nage: 2826624\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ft7gIU%2BUPR8nbVebZi1X8uCwOQp935WJE3jmfXEB6Ipbs6apPUSN8sumK7oPe12C3eyXpom09htv1aqd3p%2FgDJ3YEGi61VJuftw%3D\"}]}\r\ncf-ray: 9906adb8ed93c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3375747,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 900 x 120","md5":"a0739761e7119c14a23bfa75e3eca6d5","sha1":"d0fde0dc735db631a02f5ecac367c1844a7d3e2b","sha256":"057de36765c95905b9d9d9d9dd628da250c149c859b859b8bd1327e4e3ab71ea","sha512":"8218293880a297cb2a13e6cc422f6106f68c850c3ea27f3496f5188655b1607d790fc4df16635905483678d5fa2735b8af86ce8298be48da37fa7506251b4e5b","ssdeep":"24576:+h/tRm6S+dYUj7iGQT2T43FkF+UERJ12F+r:+hjhuUiNtiG/2+","tlshash":"e82523c5576d8c232f163580480b63bad0bd75f222f97e6fa245e9a0eba4735259f3c0","first_seen":"2025-09-24T12:00:18.324559Z","last_seen":"2025-10-19T09:54:58.163874Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1602,"timings":{"blocked":318,"dns":3,"connect":29,"send":0,"wait":5,"receive":784,"ssl":387},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/styles/fa/solid/home.svg?v=5.15.3","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /styles/fa/solid/home.svg?v=5.15.3 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/css.php?css=public%3Acarousel.less%2Cpublic%3Anode_list.less%2Cpublic%3Axfmg_media_list.less%2Cpublic%3Aznl_loader.less%2Cpublic%3Aextra.less\u0026s=3\u0026l=1\u0026d=1760476894\u0026k=1a7d863f5b2813fa5fff5f6c8d7c51b564fcb076\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Fri, 04 Apr 2025 11:55:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67efc895-2be\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":702,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9790af1610f60402469dd7c93bbe084","sha1":"a54852b99a98677a73600f72afb8c011ac255682","sha256":"079bff89912ae12396849158866aab0955383caa49e14e4e61425df3d2c7c4fb","sha512":"1bc224c3b57c918edc2fd126c5ea9d232160214b83c23593cc0c6610167081caa93269d702e8ca6df0979c844f9b0ec2f7635294afaa54f0d88f7c36d21b8ea3","ssdeep":"","tlshash":"770199bf056a327d02d3070b1e2082683bdf607832454779888e41fa694b751e2db69c","first_seen":"2025-02-07T22:56:53.034633Z","last_seen":"2026-03-15T13:49:59.349793Z","times_seen":16,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://carder.market\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:17:37 GMT\r\nexpires: Tue, 13 Oct 2026 23:17:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 378822\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-04T03:45:50.364076Z","times_seen":713688,"resource_available":false,"data":null}},"time_used":3443,"timings":{"blocked":1687,"dns":0,"connect":28,"send":0,"wait":14,"receive":10,"ssl":1664},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/avatars/s/148/148164.jpg?1692564888","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/avatars/s/148/148164.jpg?1692564888 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:18 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2080\r\nLast-Modified: Tue, 19 Sep 2023 20:39:40 GMT\r\nConnection: keep-alive\r\nETag: \"650a070c-820\"\r\nExpires: Sat, 18 Oct 2025 09:31:18 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2080,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"32b51156282ce336b16577710d6fc6a7","sha1":"03e3bcfbf8c2c986c0651bb37e16d9e51fa0b00a","sha256":"9eb5a20b1db50a43a42ea2a3994586bcb1d09ae5f17a3a4c60faf886b3f578df","sha512":"0a893efe474bb702270a0447e8e1c74eb856d5b991916171ee79ddddbd9e32131fb511e69354e4413a4aaf5150ee3266893623b466124311bc72d43c60e08db2","ssdeep":"","tlshash":"77413a938413d3b981742d2b2e6563698db618d74f6f80b48724c7664ac3ac03acfe63","first_seen":"2025-10-18T08:31:51.318053Z","last_seen":"2026-02-19T20:53:03.30861Z","times_seen":3,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":501,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/data/local/icons/regular.svg?v=1760476895","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /data/local/icons/regular.svg?v=1760476895 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Tue, 14 Oct 2025 21:21:35 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68eebedf-1e90d\"\r\nExpires: Sat, 18 Oct 2025 09:31:17 GMT\r\nCache-Control: max-age=3600\r\nStrict-Transport-Security: max-age=31536000;\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125197,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3668b1989a97ca99f375de65d2ce5f15","sha1":"855b4934fdd28d78978c9e3d999cb3a535c7bd43","sha256":"a144b51813bfe0af47f699ebe2a1b1b6715ac0d879a73d32241061644b09cf54","sha512":"8ca3dc0486d45bc95d60900f4660d4ff20f748acb637c463244a9485a855411678458f08b5ba21217f21ec80d043c489a965c5bde28ba4de5ac75a22ab97b3d4","ssdeep":"1536:H9/mna47GoLFnjecXV6J/xgrEngXNIhHKnRH7RbKXxdtzBkL/tWl0bm+8byZZ7Py:ka47T5hXAJNsStGL/tWl5byZZOpi0","tlshash":"76c3c7a9d7b8b7bc59c543b5972010b4268f89ff31d08264a6bdc6e03b5b1d8dac79c0","first_seen":"2025-09-18T10:54:40.873772Z","last_seen":"2026-02-19T20:53:03.314589Z","times_seen":11,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"carder.market/css.php?css=public%3Acarousel.less%2Cpublic%3Anode_list.less%2Cpublic%3Axfmg_media_list.less%2Cpublic%3Aznl_loader.less%2Cpublic%3Aextra.less\u0026s=3\u0026l=1\u0026d=1760476894\u0026k=1a7d863f5b2813fa5fff5f6c8d7c51b564fcb076","fqdn":"carder.market","domain":"carder.market","tld":"market"},"ip":{"addr":"94.26.38.41","port":443,"asn":48452,"as":"Traffic Broadband Communications Ltd.","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"carder.market","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 15:47:36 GMT","end":"Tue, 13 Jan 2026 15:47:35 GMT"},"fingerprint":{"sha1":"68:79:33:AB:2E:0B:CF:AC:3F:46:26:54:2D:EB:CD:55:9A:1C:93:10","sha256":"63:2F:FD:50:A5:6C:16:8D:40:16:6F:39:03:9E:0F:4A:E6:27:3F:24:AD:4E:2C:A1:87:26:EC:38:8C:30:43:E6"}}},"request":{"raw":"GET /css.php?css=public%3Acarousel.less%2Cpublic%3Anode_list.less%2Cpublic%3Axfmg_media_list.less%2Cpublic%3Aznl_loader.less%2Cpublic%3Aextra.less\u0026s=3\u0026l=1\u0026d=1760476894\u0026k=1a7d863f5b2813fa5fff5f6c8d7c51b564fcb076 HTTP/1.1\r\nHost: carder.market\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nCookie: xf_csrf=2b5UTGR2nT1A0PHm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 08:31:17 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 15841\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nExpires: Sun, 18 Oct 2026 08:31:17 GMT\r\nLast-Modified: Tue, 14 Oct 2025 21:21:34 GMT\r\nCache-Control: public, max-age=31536000\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79666,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"20b3e7bf4206348cbd91bbf4807d039a","sha1":"bed9208eb78b3026f272e3b2f8b8a2920f676842","sha256":"9e6cae85bd6e65bdebb016abf0eb889d8c1d9fca4675a1fdcdbaf59f43d64a9f","sha512":"bc72a1f1e88f8b7e6280f43f873cf014210de334de2f18077923afe3f53276da3f3727787b29fe2cfdd041055713537908243329b08810fc529ef2454ab9973f","ssdeep":"1536:WnaJbr63uKjdjE/11vwnTbttngRkFTEHSQaSsW5KxKUm3SJJrEn0KyTWtw:saJbr63+14T9FTEHSQaSsWh3mJrEn0K6","tlshash":"5e73d8c93bf11e64256792286a866214771dc082c60dee58b9f104bc9fdc2edd4fa78f","first_seen":"2025-09-24T12:00:18.329419Z","last_seen":"2025-10-19T09:55:00.560326Z","times_seen":4,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":132,"dns":1,"connect":64,"send":0,"wait":201,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.081Z","timestamp":0,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Oct 2025 08:31:17 GMT\r\ndate: Sat, 18 Oct 2025 08:31:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pic-cc.com/pikcha/jerry1.gif","fqdn":"pic-cc.com","domain":"pic-cc.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pic-cc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 07:05:47 GMT","end":"Tue, 25 Nov 2025 08:04:14 GMT"},"fingerprint":{"sha1":"1D:B6:9D:CC:55:71:D6:92:98:C6:5D:4E:8B:F3:1A:BB:39:D3:88:EC","sha256":"E6:B7:07:25:A2:9C:D4:F0:81:C3:A0:FC:5F:8A:F3:48:FB:45:BB:F9:DA:FB:8E:03:10:FB:86:F2:DF:3A:16:B7"}}},"request":{"raw":"GET /pikcha/jerry1.gif HTTP/1.1\r\nHost: pic-cc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://carder.market/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 08:31:18 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5171003\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 12 Jul 2024 14:20:22 GMT\r\netag: \"66913ba6-4ee73b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nstrict-transport-security: max-age=31536000;\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-expose-headers: Content-Length,Content-Range\r\nage: 1834594\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNvJG%2BSdtYKD18xMrhZDLWdQFdez5kK6Qw0lB9HIDXoC5yG0zCbU66OZr9GeBzGoXBvSo32fkmWr9QNxJ%2B6xMJHPbVhRanJbN2M%3D\"}]}\r\ncf-ray: 9906adbb0ac3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5171003,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1400 x 120","md5":"fce53b56dfab19c9f08d9dd860b68a6c","sha1":"4e9ca2be15403f31df570c26e24a6356a22812e1","sha256":"972e40313664c377a57a025bae9560bdffce755bb3733fcce3ef9f4fb3628edd","sha512":"907594015d6f40cf915cd0c3e3e76174d2a411ed3218ea9de96e04c5de89a139d070b1b345422df8a14a078d6984e2bab62ea03ef28135874d823e046db02ebe","ssdeep":"24576:wwVlS2lf1oVKRGGdrwW5GK3iuEWMpTyEblEs3:wASZEPd/2Byg","tlshash":"062533f9864707cbe9da6f3e328b9f7329202e9de0552b371172e3b2955355c1728063","first_seen":"2025-10-18T08:31:51.333189Z","last_seen":"2026-03-15T13:49:59.311719Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1846,"timings":{"blocked":323,"dns":3,"connect":15,"send":0,"wait":18,"receive":678,"ssl":782},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://carder.market/","date":"2025-10-18T08:31:17.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://carder.market\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 18:55:24 GMT\r\nexpires: Tue, 13 Oct 2026 18:55:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 394554\r\nlast-modified: Mon, 08 Sep 2025 18:08:08 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-04-04T03:35:24.799647Z","times_seen":56150,"resource_available":false,"data":null}},"time_used":1542,"timings":{"blocked":732,"dns":1,"connect":48,"send":0,"wait":53,"receive":1,"ssl":635},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://carder.market/","date":"2025-10-18T08:31:18.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://carder.market\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 13 Oct 2025 23:21:33 GMT\r\nexpires: Tue, 13 Oct 2026 23:21:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 378585\r\nlast-modified: Mon, 08 Sep 2025 18:08:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40572, version 1.0","md5":"c127ab3cd3cd07eb1105370e70d67d76","sha1":"82677e46b52b8d93d5f34c9bbef71032d1cfee3c","sha256":"d758e85352971dffe51a5992405eb8f9b316b1bed82495445c328699ee400830","sha512":"a1fcbe9ac0f9aef7c40681f781a068450953e5cce43070a968b090f9cbd5902bf922e4bce422cb7ceb41c0641f2dd3ecb578d98f4b2852a9f41e9e296a76796e","ssdeep":"768:D0ueU3Qk/Vm6R/b2xzvCaMAqrnKE04AmmeFJlUPbksYiy3EGJIVoGnnq:D0s3QkNm6z6vkrnKEBAmLfUodjJIVRq","tlshash":"c803f1e09e226abcf137c171ac74cc2c94e2606bfa1b393d61316403ebd80f7e1a5956","first_seen":"2025-01-09T19:55:13.017129Z","last_seen":"2026-04-04T00:47:23.857732Z","times_seen":9125,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":623,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}