{"report_id":"9243ae69-9b2f-45c2-909e-ef84b0d018ae","version":0,"status":"done","tags":[],"date":"2026-07-28T17:59:16Z","url":{"schema":"https","addr":"nexus-market.cfd/","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"172.67.170.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexus-market.cfd/","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"title":"Nexus Market | Official Onion Links \u0026 Verified Mirrors 2026","dom":{"size":34555,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (579)","md5":"60235b75ec5fc93dcbcaa875a2fb5f32","sha1":"1549c4eb5dc9a6dd93c634fd29506f779fd7cc20","sha256":"594acd405fbb2d07e06fa09e4885d00e69778f6b830f59b00bd67a6ec270d477","sha512":"2b3d4269e55cd04a7debadabc49cda0dc23233fe275a0138556d6f09326a3379ae5b0e5bc09d3700bac045fe8d32b9e0bada10124ae4102f860cda327344d748","ssdeep":"384:encKSjsXUeCASQgZKpNafvs9AMgoCG3k2:VAUd1QgZKpNaf4goCG3k2","tlshash":"f5f2b52532f119ba41f7c3b2b772bb6a9b548347d51b8c09f2bd03960fc2c529d63298","dom_hash":"domhash1aca4f89d5fdb1a20bb654eccf00393e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nexus-market.cfd/","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"172.67.170.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T17:59:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexus-market.cfd","ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-28T17:49:40.71761Z","last_seen":"2026-07-28T17:49:40.71761Z","alert_count":9,"request_count":9,"received_data":943208,"sent_data":4627,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexus-market.cfd/","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4688f8e4a8eae993042463e3ffa368a","sha1":"32a5a39cd1accf3bc2ba8899912d740b4c67340d","sha256":"f76185e3d377055925fc6672c4ea9643309c23475295b63622b96023d793b8fd","sha512":"67b0874d6554fa38deed875bf86098c9a350c9fefaca3d86dbec45e4deb2dddb8089122c038902b359192fcc203f72e273514cc186f87609110f8dc81b04cae5","ssdeep":"","tlshash":"2a51cf0e72a21a35c9f76db333abe69c352050c3a454c8147a2ddb490f23e65f8a76cc","size":2470,"data":"","first_seen":"2026-07-28T17:49:45.703017Z","last_seen":"2026-07-28T17:59:21.367636Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexus-market.cfd/favicon.svg","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexus-market.cfd/","date":"2026-07-28T17:58:50.463Z","timestamp":1785261530463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-market.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:07:16 GMT","end":"Fri, 23 Oct 2026 06:05:45 GMT"},"fingerprint":{"sha1":"A0:24:02:75:30:B1:97:63:52:90:44:20:CE:9C:F2:27:F6:6D:EF:2D","sha256":"36:C3:DC:F9:87:B3:12:C7:6F:9C:E2:7D:F6:FD:52:BA:D8:03:A2:DE:B0:4C:79:28:A0:69:67:79:7F:04:28:30"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: nexus-market.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexus-market.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:58:50 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a335dfc-cb22\"\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 18 Jun 2026 02:54:52 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CodMo1EVCzc2tXO30RRcWGwGQxEdWimMy0t07evHPzLzTDSSuMI77SFSp5b9xMng4U3HPgTMRvEbU8whi%2BeY8UA9apWTzOcAYnsPSA4Z9o3TPmN7UCWQDVFuwYIofi7AhI6v\"}]}\r\nage: 578\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a225c63568f8b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52002,"size_decoded":40086,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c2fa2e476afc830c0beb6ebce5d51674","sha1":"8c96e0466ec03303f71dee85a392bcbbc8a8f002","sha256":"780d88025a03778415e8848a0dc2ec874cff0de2412faf4546c38bf2f6d2497e","sha512":"a1b8fd269d8a75c9be128adb2694ddac55117cc5ddc36ff4d4a95c85c9eea242cc3c3abe1669cab527a7644802d5bd8f9068b833b5ce33895046a9eb5cfb83ac","ssdeep":"1536:qz2LAkvpAPn8r2XrmDRThkXbZfBQgQK/fVHV:wLkvi8SbsN8QQ","tlshash":"0433023089773ad448388e604801c8e91ef49ab4304d8b9efe4836dafaa46fc77d4dd5","first_seen":"2026-02-12T21:54:03.90362Z","last_seen":"2026-07-28T19:58:11.147637Z","times_seen":58,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexus-market.cfd/","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T17:58:49.987Z","timestamp":1785261529987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-market.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:07:16 GMT","end":"Fri, 23 Oct 2026 06:05:45 GMT"},"fingerprint":{"sha1":"A0:24:02:75:30:B1:97:63:52:90:44:20:CE:9C:F2:27:F6:6D:EF:2D","sha256":"36:C3:DC:F9:87:B3:12:C7:6F:9C:E2:7D:F6:FD:52:BA:D8:03:A2:DE:B0:4C:79:28:A0:69:67:79:7F:04:28:30"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexus-market.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:58:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nlast-modified: Sat, 25 Jul 2026 13:32:22 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=900, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duYS%2FvEFaWrgzpOxKvlp4Fkta0jKogbQThGeekFS0Gt9Yzo8d2YKUH2F9O0LIUl3gWP%2BuH27IMOciy3mUXhTIvduxMo24LnwOAefEzhTBe5MEGpHJ5p5WLlyXajUsJGr5N1K\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a225c63338ddb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34562,"size_decoded":8488,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (579)","md5":"7968f60d71e66b59d40b3783ebbc7e7d","sha1":"ea03f5f3d1fdac31bf51b19a9c598063e80a83ae","sha256":"84f52b05ae7034830f1dbbf2abee11604b465f6ab81538ea4fdccda469bacfbd","sha512":"edb63c6821fca8da79307f7279008947a83fefbe39cd723459a501dd198faf133d27ad4422e174d0b9d6075f185c71ae869e098f95d0e9707920e6d4f5489d3f","ssdeep":"384:RnCrxmsXheCzSQDAKpNafvs9ARgoCG3kU:YlhdGQDAKpNaf9goCG3kU","tlshash":"ecf2b52532f119ba41f7c7b2b772bb6a9b548347d51b8c09f2bd03861fc2c529d63298","first_seen":"2026-07-28T17:49:45.682075Z","last_seen":"2026-07-28T17:59:21.349169Z","times_seen":3,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":111,"connect":15,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexus-market.cfd/style-index.css","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexus-market.cfd/","date":"2026-07-28T17:58:50.380Z","timestamp":1785261530380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-market.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:07:16 GMT","end":"Fri, 23 Oct 2026 06:05:45 GMT"},"fingerprint":{"sha1":"A0:24:02:75:30:B1:97:63:52:90:44:20:CE:9C:F2:27:F6:6D:EF:2D","sha256":"36:C3:DC:F9:87:B3:12:C7:6F:9C:E2:7D:F6:FD:52:BA:D8:03:A2:DE:B0:4C:79:28:A0:69:67:79:7F:04:28:30"}}},"request":{"raw":"GET /style-index.css HTTP/1.1\r\nHost: nexus-market.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexus-market.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:58:50 GMT\r\ncontent-type: text/css\r\netag: W/\"6a6450c3-3ca7\"\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 25 Jul 2026 05:59:31 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZIZni9tFz%2Fv3YfCKq4Ch6ERY1UaNV4zB3vzxShsV97UMmAkYJDwwSnE1BKSZNwS2jO0Ikj3llT9xu2DYX09PZaB7ySdIHagbRE%2FFUiFSOZ%2F95TCCZGmFVMjbaFuiEexAGLfo\"}]}\r\nage: 578\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a225c634e8e9b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15527,"size_decoded":4769,"mime_type":"text/css","magic":"ASCII text, with very long lines (15527), with no line terminators","md5":"bda54b77a113ac21aef2ca8b59d7b5b5","sha1":"b5f8ed291fa7040670be242072365160655400f0","sha256":"93ff36fa7a680f324da8e342616c94b37c6e0d40499cb4fa61f45ddfa3802c94","sha512":"e934b6f38f975f81c6d767c1b5e1669aad5b68dcb92cae617fcd752ea744ae6b681022bed6feeada0ee309eed706efcb74105d61a97ac74eb6b4fe6991ac44dd","ssdeep":"192:Y7JXYS7JXYHGw2kQ1sf1sf5XZdbt2gsncn4dgA9LNTr5US:GHnwk3XZRyc4d/3rl","tlshash":"bb62d90ebb14152e6c3b44f3d5d5ba9cb126e1c1ef36aaeab95211019fd62f71ca3204","first_seen":"2026-07-28T17:49:45.685399Z","last_seen":"2026-07-28T17:59:21.349627Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexus-market.cfd/img/nexus-market-cfd_screenshot_2.png","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexus-market.cfd/","date":"2026-07-28T17:58:50.388Z","timestamp":1785261530388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-market.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:07:16 GMT","end":"Fri, 23 Oct 2026 06:05:45 GMT"},"fingerprint":{"sha1":"A0:24:02:75:30:B1:97:63:52:90:44:20:CE:9C:F2:27:F6:6D:EF:2D","sha256":"36:C3:DC:F9:87:B3:12:C7:6F:9C:E2:7D:F6:FD:52:BA:D8:03:A2:DE:B0:4C:79:28:A0:69:67:79:7F:04:28:30"}}},"request":{"raw":"GET /img/nexus-market-cfd_screenshot_2.png HTTP/1.1\r\nHost: nexus-market.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexus-market.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:58:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 26 Jul 2026 02:28:25 GMT\r\netag: \"6a6570c9-29465\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bd%2Bv1NKmIXU4ES3PwraU5x41c0lLrK1Ybjsx1gCq6xGNL%2F8bkko%2B%2BvUoWZBMrazR1KQIaFjV1D3GQq%2B2Rb1%2FS6K3QU2TrtJJQykRxyGS1rt%2B7Am94zt0OJVnkKSq%2F82e22QV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225c634e8eeb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 169061\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169061,"size_decoded":169953,"mime_type":"image/png","magic":"PNG image data, 1412 x 807, 8-bit/color RGBA, non-interlaced","md5":"d0f6a455e7d270b7eda68e521a4f87ca","sha1":"3e03b128020e4e2d16c62ff542b382b1b9adf430","sha256":"4be940dc14b8d0dd03a0d8058c1f3e3c98fcf657383a8532e10e1e5d6a1ae070","sha512":"0d7a36a493e4277628eb053486eaca5d9b2da5b93ddd005ec5d294e5067158238e04181293ab4ebdbf5a68cc73bb40928b06f52f807317f54bfc03080e06ee3c","ssdeep":"3072:ITOkcbT3HLWgIORLjnMRo8wcgd+Bp4BN9JpCiA6/CSTu8YqeapPSjUiPrQIDAC5M:ITfS75hhMO8wcgd+BuBHJCWJS8YqVYUP","tlshash":"6af3027dd93782574fb78267c54d46a8a377698f49108235a062776cfac0834ee0f68f","first_seen":"2026-07-28T17:49:45.694433Z","last_seen":"2026-07-28T17:59:21.350495Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexus-market.cfd/logo.png","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexus-market.cfd/","date":"2026-07-28T17:58:50.385Z","timestamp":1785261530385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-market.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:07:16 GMT","end":"Fri, 23 Oct 2026 06:05:45 GMT"},"fingerprint":{"sha1":"A0:24:02:75:30:B1:97:63:52:90:44:20:CE:9C:F2:27:F6:6D:EF:2D","sha256":"36:C3:DC:F9:87:B3:12:C7:6F:9C:E2:7D:F6:FD:52:BA:D8:03:A2:DE:B0:4C:79:28:A0:69:67:79:7F:04:28:30"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: nexus-market.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexus-market.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:58:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Thu, 18 Jun 2026 02:54:52 GMT\r\netag: \"6a335dfc-2a5b\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rLFbBRLbajQ83Q%2FNnsjHxXJG3pbw%2FRIwsH5n4b6V6sg9DttgCAcUGDqFrJIopmgqlFPIWUT63hNIijXhroNEq%2BMyehFFsb2JYNrxcG1NjZ6sj94qpOaPZiZupfL%2BL6%2B53OJY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225c634e8ecb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10843\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10843,"size_decoded":11727,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"a7912d63c5b2accfd08b77f4103b7d6e","sha1":"267a5350bd1992e86306fa84b03bee5787fda7c5","sha256":"16dcb53b5995319cc2294119a384b282a7fd900f3eea261a9356652295384f80","sha512":"66b013d440446a832eb6c408386861ae8e6ba02a1257bb35b4d671b996fc7ee4c0ab9e8cc8e488d4500e476f09ab67ab71e6191b6eb42e0d2c971e364adbad17","ssdeep":"192:QCI/7Tcgq0A6b7ImBVxQggT/cUF0UrTbNTz8usj7me2+ut3MRGTzUzkmghIpFzB4:Xas0AG7Jl8UaTxzx4ON3MwzpmghY9Ryd","tlshash":"be22cf4ba91744c8cb5901607cfd5265ecfc9e8e44e6f72409aed826edb80b21ae4727","first_seen":"2026-02-12T21:54:03.900768Z","last_seen":"2026-07-28T19:58:11.143484Z","times_seen":60,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexus-market.cfd/img/nexus-market-cfd_screenshot_1.png","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexus-market.cfd/","date":"2026-07-28T17:58:50.387Z","timestamp":1785261530387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-market.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:07:16 GMT","end":"Fri, 23 Oct 2026 06:05:45 GMT"},"fingerprint":{"sha1":"A0:24:02:75:30:B1:97:63:52:90:44:20:CE:9C:F2:27:F6:6D:EF:2D","sha256":"36:C3:DC:F9:87:B3:12:C7:6F:9C:E2:7D:F6:FD:52:BA:D8:03:A2:DE:B0:4C:79:28:A0:69:67:79:7F:04:28:30"}}},"request":{"raw":"GET /img/nexus-market-cfd_screenshot_1.png HTTP/1.1\r\nHost: nexus-market.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexus-market.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:58:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 26 Jul 2026 02:28:27 GMT\r\netag: \"6a6570cb-1976f\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9TixCFYLtstNXX7W9jvrLaYO5wu5ebSTdeRktl%2FFn9Hs%2BOIaTWQVBNGyCSlJMETNkEAQ9T5ZLEDz5xCRjIXab6vr1QzOc%2Br2puXDiS1deJ%2FDeHFEc6CpJLhP99jwlaBdeErn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225c634e8edb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 104303\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104303,"size_decoded":105187,"mime_type":"image/png","magic":"PNG image data, 1400 x 800, 8-bit/color RGBA, non-interlaced","md5":"4abbafe0d14f21b30dc109a3b84710b5","sha1":"648b9d4abc855937f130718ad75ea372997b99bd","sha256":"6ed6115d9ba80d9953e9b3851ca9a283355fa76281fd5d38e2589815ee5b9c20","sha512":"5abe2a807d262e3dfecb7d01fd1b46f67e824f17f9f1927c35773853d43735f69d6bbc72a0ac1d71eb4edc97ea8fc0b6d304eb67104fb61d977b901123024c29","ssdeep":"3072:ZKXTLus/8mT3qzh5vGCVhFrz5zvf2EqBh:ZKX2WzY5+UxvuEq/","tlshash":"67a3f192516fc302cdff346d7c3cab9a365396ccea5aabb153f8964cd602e454888cd4","first_seen":"2026-07-28T17:49:45.689795Z","last_seen":"2026-07-28T17:59:21.366399Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexus-market.cfd/img/nexus-market-cfd_screenshot_3.png","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexus-market.cfd/","date":"2026-07-28T17:58:50.392Z","timestamp":1785261530392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-market.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:07:16 GMT","end":"Fri, 23 Oct 2026 06:05:45 GMT"},"fingerprint":{"sha1":"A0:24:02:75:30:B1:97:63:52:90:44:20:CE:9C:F2:27:F6:6D:EF:2D","sha256":"36:C3:DC:F9:87:B3:12:C7:6F:9C:E2:7D:F6:FD:52:BA:D8:03:A2:DE:B0:4C:79:28:A0:69:67:79:7F:04:28:30"}}},"request":{"raw":"GET /img/nexus-market-cfd_screenshot_3.png HTTP/1.1\r\nHost: nexus-market.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexus-market.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:58:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 26 Jul 2026 02:28:28 GMT\r\netag: \"6a6570cc-2bc3e\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tj7WyAn8vyNFjMNngybVAuJiGN0xoQDbherfflTZjHjOdocTF%2BbfsOARFxdHJl1vREHxYR2d4MtyFxle%2FQrIGuXXzP4wOzISKcSOlw%2FWscjZ%2FCsc9dY0xtkkrk40GPimbwUn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225c634f8efb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 179262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179262,"size_decoded":180146,"mime_type":"image/png","magic":"PNG image data, 1412 x 807, 8-bit/color RGBA, non-interlaced","md5":"034de056fe0aee0939d23391590e2afb","sha1":"6764c8302721955dd412c0fd1da6ccd87693ec55","sha256":"47174c1ad0fb14c28bc5c884b68f6bf15590f8fd3706a43c343baba35dcb6c7e","sha512":"f8bbcbcd14cd37c4ea5aa6754d42d55e5b398c40349afdd60745d0342ed3a5094ed39079fc3e9c7bc0b514ab828e651d3d67f5ec6fece7c3bcbcb0f9d65a8798","ssdeep":"3072:ICAL5Bfkq9D/MCX3vmuEe3sOB8++8Qqgj3UST+cXFaH8uQvB/M5sdrVHQWOL:I/L5djBvPwOjQL4f8C8uQvBkcVHwL","tlshash":"5304121949bbb976dd8d444ad30785582b3320238224aa7d9eeeb61bf501df84b4cdcf","first_seen":"2026-07-28T17:49:45.697253Z","last_seen":"2026-07-28T17:59:21.350929Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexus-market.cfd/img/nexus-market-cfd_screenshot_4.png","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexus-market.cfd/","date":"2026-07-28T17:58:50.393Z","timestamp":1785261530393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-market.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:07:16 GMT","end":"Fri, 23 Oct 2026 06:05:45 GMT"},"fingerprint":{"sha1":"A0:24:02:75:30:B1:97:63:52:90:44:20:CE:9C:F2:27:F6:6D:EF:2D","sha256":"36:C3:DC:F9:87:B3:12:C7:6F:9C:E2:7D:F6:FD:52:BA:D8:03:A2:DE:B0:4C:79:28:A0:69:67:79:7F:04:28:30"}}},"request":{"raw":"GET /img/nexus-market-cfd_screenshot_4.png HTTP/1.1\r\nHost: nexus-market.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexus-market.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:58:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 26 Jul 2026 02:28:26 GMT\r\netag: \"6a6570ca-5181d\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E9A0WAHalmUZ56Df0YZ4%2BtQ0Klg1mOelX6pHJbknUqBjgG01GLqrH5wTorSkjGm%2FI%2BDrprYkER%2BEl0ULlYqERzJ6CYg5nJw8ShN1fEnZv1bSGP8h2keZFZMzAHpNvrleXkn4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225c634f8f0b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 333853\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":333853,"size_decoded":334737,"mime_type":"image/png","magic":"PNG image data, 1613 x 907, 8-bit/color RGBA, non-interlaced","md5":"451743a51e0ec0e1b81f2d451f2e0de6","sha1":"e520032faa7c3633ecbd5f0a6972906fc7735151","sha256":"da9e8c4a02070cd256d2791ca089511ffaf098cd88e008c7ace7d15f164e549a","sha512":"1da4046349b98d32b395723298f01140c82afae6f4385cecb630536531bbc6acdf1de189bb4fd70a99ab6e5dbca97e30a76415b86a0d20940486f084d59e91b9","ssdeep":"6144:ATAlQKZqrMZhu57tMfv+tjhYDVtzuz/067e5RamGjyirsnSjvaD:AjKZqQK572fvgWDrSyjarsSjvaD","tlshash":"4e64238cc471c82edd8750bf4a25ea812b7255a365d00dfce66ab14c9d82dfc2e4993f","first_seen":"2026-07-28T17:49:45.699296Z","last_seen":"2026-07-28T17:59:21.351359Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexus-market.cfd/apple-touch-icon.png","fqdn":"nexus-market.cfd","domain":"nexus-market.cfd","tld":"cfd"},"ip":{"addr":"104.21.39.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexus-market.cfd/","date":"2026-07-28T17:58:50.461Z","timestamp":1785261530461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-market.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Jul 2026 05:07:16 GMT","end":"Fri, 23 Oct 2026 06:05:45 GMT"},"fingerprint":{"sha1":"A0:24:02:75:30:B1:97:63:52:90:44:20:CE:9C:F2:27:F6:6D:EF:2D","sha256":"36:C3:DC:F9:87:B3:12:C7:6F:9C:E2:7D:F6:FD:52:BA:D8:03:A2:DE:B0:4C:79:28:A0:69:67:79:7F:04:28:30"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: nexus-market.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nexus-market.cfd/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:58:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 18 Jun 2026 02:54:52 GMT\r\netag: \"6a335dfc-8c04\"\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000\r\nx-cache-status: MISS\r\naccept-ranges: bytes\r\nage: 578\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0nEunPl4A4nWZbsP4s2V2AOhm60aerS0wPcdB8hkV1%2F7PDfYEavaLP%2FaiVHuOYAw0HIUy7ykXDEFEZz2ObUg1ng9gGZtTDt%2BNB%2BtL0Mzn5xE1J5hoGL%2B6msCaC171hyXgka\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225c63568f7b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35844\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35844,"size_decoded":36731,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"a10167f5b34d763cda797edf9fda2292","sha1":"9fa3620a297f02a734a06424027708be1680d02f","sha256":"527dc4a461de222c753fe9feba3948b3b15bfce962a8f14a0a70df7ef74b1bd9","sha512":"1010b7ae89608bd12a24706caa619777f138a3e903f62777a35c7b6a762c1eabcdc336599adf05ddeb4b16f72d5fc96ef9259bdbe6e32242dd5fda33c2bf3445","ssdeep":"768:1qu85f7a2vQnFDyeK3EmvvxCPeXEuen1tMZH2jhoLHAtmu:Iucf7a2oxyeK3EkvxiPtvMpSKLgf","tlshash":"6ff2f106659e9c320c378837cf88ef6b59ecfe44c1939c94843acbb74384562d2a98f1","first_seen":"2026-02-12T21:54:03.905843Z","last_seen":"2026-07-28T19:58:11.140861Z","times_seen":31,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"nexus-market.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}