- Nikto 
---------------------------------------------------------------------------
+ Multiple IPs found: 185.166.104.4, 185.166.104.3
+ Target IP:          185.166.104.4
+ Target Hostname:    nakhlmarket.com
+ Target Port:        80
+ Start Time:         2025-10-16 12:44:33 (GMT-7)
---------------------------------------------------------------------------
+ Server: Sotoon CDN
+ /: Uncommon header 'x-zrk-sn' found, with contents: 4002.
+ /: Uncommon header 'x-zrk-cs' found, with contents: BYPASS.
+ /: Uncommon header 'x-zrk-us' found, with contents: 200.
+ /: An alt-svc header was found which is advertising HTTP/3. The endpoint is: ':443'. Nikto cannot test HTTP/3 over QUIC. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/alt-svc
+ /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ /2sIovtFv.net: Link header found with value: <https://nakhlmarket.com/wp-json/>; rel="https://api.w.org/". See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Link
+ /2sIovtFv.net: Cookie PHPSESSID created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ Scan terminated: 0 error(s) and 7 item(s) reported on remote host
+ End Time:           2025-10-16 12:45:35 (GMT-7) (62 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested