{"report_id":"001097b8-d68b-4624-b523-e60efa4d8ac8","version":0,"status":"done","tags":[],"date":"2026-09-07T07:03:07Z","url":{"schema":"https","addr":"darkbrowser.pro/","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"172.67.192.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"darkbrowser.pro/","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"title":"Рабочее зеркало магазина Кракен — Кракен зеркало рабочее. Актуальные ссылки на Kraken onion. Обход блокировки Кракен. Всегда доступный вход на Кракен. Безопасный доступ к магазину Kraken","dom":{"size":46975,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"29ff4053a807ea25cf7d63a85d05dc30","sha1":"dedb9bd28bb26c35acb7b9f96d6aa2492ebd671d","sha256":"db7e756fd49ccd4ba5c1ab14e1424f5a49bfb1f0dece2fcbd81cfcbbd896f91b","sha512":"53b98a86ecf8a0f0c74bf0cbc0b3ea9d239806c448cf59a6cec105f91f65d05629623f654eda3e1042664c59170e7f7fc022885dfc9d2947b18dce272efc71ae","ssdeep":"768:DTWKZdypa9XN9FJW8YCUK6oyWaue6Uh76xpMHFxJVVh76kyIJ+b0vLBY:DTvypuN9FJW8xUKb7aueD7IQ7JyIRY","tlshash":"fa23973190ad20f62206d1bacc087618bcd5697ebe6fa76531fc75ac2fe15b5886730c","dom_hash":"domhash80faac59a62287d1a2196b61f494062e","first_seen":"2026-09-07T07:03:10.782009Z","last_seen":"2026-09-07T07:03:10.782009Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"darkbrowser.pro/","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"172.67.192.91","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-12T07:03:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"darkbrowser.pro","ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-29T00:13:54.384729Z","last_seen":"2026-09-07T07:02:51.086909Z","alert_count":34,"request_count":17,"received_data":3312300,"sent_data":9468,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":2,"received_data":47542,"sent_data":1105,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":4391,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":1,"received_data":519733,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/themes/krkn-blog-04-may/js/navigation.js?ver=1.0.0","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6345329ae0a43bbbc781658a48064072","sha1":"3deac4942970004c7bfd51dc2e68dd4d59ce41db","sha256":"4f5cae0ba90fd633e411009efe47444bac6942a381e0a633771e7baf2b5805dd","sha512":"56a53db886502414e189a1b6253ec4d812aa3adc980fd6783bbebc8f19840c5facd56d4436a2b31c83ca713742ebfd90056a037eee3b001fd2be6b3ed5b12142","ssdeep":"","tlshash":"2d5113e7368f337b0be93292a3b960e6b738c075a145727a78aac905251045013befdd","size":3079,"data":"","first_seen":"2023-03-08T13:20:15Z","last_seen":"2026-09-07T07:03:10.79895Z","times_seen":369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-includes/js/wp-emoji-loader.min.js","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"905f43c5965a92302c9caf82be84c6d2","sha1":"f0d7be5fc2d613e60f84c40f6a34206eb381a866","sha256":"6d5a4202519602cde0c77194aa0704c8005b78880f42af41f0a1ac8fa21164e7","sha512":"2232c029bd037d9c3f6c6066233865a034dd05262e55c8dfd82f161f5aeeb4d16d3fcd15a1f7c912f16a34284c49372004e76d1961eb383ba52e1bf40931cc29","ssdeep":"","tlshash":"9561a659eb7938df33fa01f3653a4d4beb614436e784d038c9ae631424b1893c375a1a","size":3398,"data":"","first_seen":"2026-09-07T07:02:53.625619Z","last_seen":"2026-09-07T07:03:10.826538Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-04CWVCSP0J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d82ee6be39345d27021f15cca3cf8ca7","sha1":"76e20cc8a7fa4141ea3464e0dc9910e7d00f55d6","sha256":"44649fe4f37bd5fcfc7b9b7183f25cdecd65b88879e65be1a3a909e94008cbed","sha512":"a60527ce1cbb9ac516905947f9cb78bb9e46254574bf4d8f9f12636e9a4a765d921df40c65bbdcf8437acbcbeca4382e86561b4153db989556f200b569144f89","ssdeep":"6144:MvH1lhNPZfKXr3uNfDZyc3DR/dEpv3ygp0eHQMlOx7aTSp:YhZeCxM0eHnOFL","tlshash":"ddb408ce73c674229396f178903f018ba57b28a2b45cc89af289dce42d3465a5177f7c","size":519129,"data":"","first_seen":"2026-09-07T07:02:53.605895Z","last_seen":"2026-09-07T07:03:10.784204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-07T16:20:50.144762Z","times_seen":50782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f72806ecd9449803478e7b16fdecbbd","sha1":"0dbda2a7266c73212069451fbcff8b9a46b8dab6","sha256":"e835f7490c6570095ba365a7ca95f5c1e4a3fcac630ad698d6848f5e7375c2f0","sha512":"9a51221f2f0cec0cb87d1d88d97e89235b6012a55a9174d18636a22b5bde15596e70554e65130ce61b0dff91dc5fd04de34722c5637b6362a71720d1b9da7149","ssdeep":"","tlshash":"9bf041e73c8a1038c3a302a13b73a2493039243f340eec52b50c18523f84f6554a750c","size":615,"data":"","first_seen":"2026-09-07T07:02:53.627746Z","last_seen":"2026-09-07T07:03:10.828717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"887d4bddf95d22a3e9f0b472eee713a2","sha1":"b6a0d2f89345ca61078a5157ffcb5cdc4108014e","sha256":"dd67ae6527e170ac72c0916828392a4b029998625c518515a4be4c58fc4139f0","sha512":"79670d7af702e3289e23ed3797b527fda53c60c4766ea256d3acba53dcab4d2bd6037e7218aa9d85fe6f28762a8cc59058fc2135940b294ab17069cbd48de0c0","ssdeep":"","tlshash":"b6c02bcc210a0cb041e727408b7fb600b0023204d4e07931481d23454d20e03d744d10","size":149,"data":"","first_seen":"2026-09-07T07:02:53.629639Z","last_seen":"2026-09-07T07:03:10.834155Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Mulish:ital,wght@0,200..1000;1,200..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.652Z","timestamp":1788764556652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Mulish:ital,wght@0,200..1000;1,200..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 07 Sep 2026 07:02:36 GMT\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3707,"size_decoded":1297,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ff96f0533125110f8f6184f1b4959bcd","sha1":"f89051379f4ec60725b172d9f34d3c3fa5863758","sha256":"d8314600fbe84906e5c35976ad5587f09d0ecf9d438c10444f8050890cbeebe2","sha512":"bd9847a578dc66280807a36029cfa40d80f2c19ca9195c4d31ad8c585c5bc46daea8ba929b20e224cb0ae417cdadc9a275ecc6df89466c196648ce991120d344","ssdeep":"","tlshash":"5171d992005b6040fb476dc17bcf7e32ae8fe095b052c4ba6bfd49d99c9ac224364b0c","first_seen":"2025-09-09T02:39:13.201985Z","last_seen":"2026-09-07T07:03:10.783573Z","times_seen":881,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":40,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-04CWVCSP0J","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.656Z","timestamp":1788764556656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-04CWVCSP0J HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\nexpires: Mon, 07 Sep 2026 07:02:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 173731\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":519129,"size_decoded":174335,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"d82ee6be39345d27021f15cca3cf8ca7","sha1":"76e20cc8a7fa4141ea3464e0dc9910e7d00f55d6","sha256":"44649fe4f37bd5fcfc7b9b7183f25cdecd65b88879e65be1a3a909e94008cbed","sha512":"a60527ce1cbb9ac516905947f9cb78bb9e46254574bf4d8f9f12636e9a4a765d921df40c65bbdcf8437acbcbeca4382e86561b4153db989556f200b569144f89","ssdeep":"6144:MvH1lhNPZfKXr3uNfDZyc3DR/dEpv3ygp0eHQMlOx7aTSp:YhZeCxM0eHnOFL","tlshash":"ddb408ce73c674229396f178903f018ba57b28a2b45cc89af289dce42d3465a5177f7c","first_seen":"2026-09-07T07:02:53.605895Z","last_seen":"2026-09-07T07:03:10.784204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":38,"receive":48,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/home-1-icon-4.svg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.807Z","timestamp":1788764556807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/home-1-icon-4.svg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nlast-modified: Tue, 06 Jan 2026 12:11:22 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YyPuGN5QE8R1FiesEiGCkxf0%2FtvrQOnW%2FQnX3MDIhWczUgrHB8HDV%2BG1v3J7ezEKpSGwx2oz5vxc%2FAv8AEbA4%2B%2BU8P%2BXZtgd%2FgJQtnZsdr%2FUjqHjAtK4MYgCfj9FRm4KzGM%3D\"}]}\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"695cfbea-bc051\"\r\ncf-ray: a373d9500ca6b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770129,"size_decoded":558394,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"333c0398aea16171150ad62b18d68ba7","sha1":"34644df542d63d2b53c46cd730e8ab07fb458369","sha256":"b1e0c3eb7b71cdcb6bcfe29cf66afc7f24864519ff3575d1eeb6f0b3ff52321c","sha512":"41cf6777cf78d6c6704d0f51c3d152bd5e3fa19150315307f4ebd2ace5d14e3f8bfaedc62bf15752cc106e5752612381e5916000f8356064c64dfb1f04b54e73","ssdeep":"12288:S9MM722HipMgT8pRrCv2oE8vibYnUBgwwbUWO4IzTiENU9OUcSU+4wy4DS:9M62HLM8POM8q4ygxUWOVzTZgB0+4d4S","tlshash":"64f423723d8b6c860b624f35f1ed1de83f1c3f5b55884785bf883c829e55a90d6e62a0","first_seen":"2026-03-29T00:14:00.835306Z","last_seen":"2026-09-07T07:03:10.785441Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk2wotcqA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.848Z","timestamp":1788764556848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk2wotcqA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://darkbrowser.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15948\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 13:23:52 GMT\r\nexpires: Fri, 03 Sep 2027 13:23:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 322724\r\nlast-modified: Mon, 08 Sep 2025 18:00:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15948,"size_decoded":16761,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15948, version 1.0","md5":"3ecaa05024bdf84d18872efcad983616","sha1":"a943e80f24c9fa4dfce7fbeae43765ee88df1671","sha256":"270a9552cb39c2aa23054f70bf8c770bc1a9c2d6e0df2841bad89f6597bcd483","sha512":"4f03dbc8551a3a25d3e343d78b6ca647316b9c7ab75612e6dbcc411636d1a05f7c77b14db4f00dccf74dd0b4d260ad98008db15a534b52923d3c450d957b5293","ssdeep":"384:Y8AMxh57n1kQWFTENAJjCEJ7Dy1Weu0/LVi3c4:YNMnpn+7TE/EYvrLwZ","tlshash":"2f62c0a6b418113c980a4521e30cf6d4db1f9ea4f6fda0fdfa1e56471570296f088f17","first_seen":"2025-06-14T03:53:15.341089Z","last_seen":"2026-09-07T07:03:10.786265Z","times_seen":355,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/p22.jpg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.815Z","timestamp":1788764556815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/p22.jpg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 Jan 2026 12:11:30 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=4,i\r\netag: W/\"695cfbf2-269cd\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECQA2KSosz8trxfST3FFOtF2hbTMchtyjupwO3qcrPDif5FQLnf7wLCkXetyk%2BLPRcKp%2FB0ccGKvwIMUlL4glYHVyaSc42u8E0aaE8wjlcNNX2sOski2dGX%2BLWaRpNvOibw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d9501caab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158157,"size_decoded":137522,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2273x1350, components 3","md5":"dde770da180c5be456b72f24f9e8d41f","sha1":"580a92ddcdbb3ffe3d923849181adc6fb797968b","sha256":"586d9860cbefc4cf0c52a5e11de81b1bd4e5ed6a0de9dcac8b0dcd6ae5690e75","sha512":"0ee3ce64bd8fa49a4de354c736e0b88403735f62b6e7199c08a9a54ebcae7039a3d4916a94d0140b8bf28dd5e6e529313f8333d4068c68b887af681b636c918d","ssdeep":"3072:dK/GmW33sxm5qQs2yMz2X2exWmDvUNq0z4YHqHAXZ5gaanUrq6PmX5Y:drmW33sxmAEhzc2exWKIq0zu6sagIq6x","tlshash":"b8f3df7423c16e93ceb25d752a664a545a23dfcc4ff92f19cf74036b036b2128ea6607","first_seen":"2026-03-29T00:14:00.839963Z","last_seen":"2026-09-07T07:03:10.787132Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T07:02:36.058Z","timestamp":1788764556058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=0,i\r\nx-pingback: https://darkbrowser.pro/xmlrpc.php\r\nlink: \u003chttps://darkbrowser.pro/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://darkbrowser.pro/wp-json/wp/v2/pages/2\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://darkbrowser.pro/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zK9UMOGRtom5emAKVHuHZC0oA8bJxYadZwbf0A49%2Fqv%2BBmUCmbUO31vTxB%2FYW2RGThOf%2FKkfq4uW10cbTW6tmtTWI%2BS34ocI%2BzzJ0xu%2BjRahSapPrcyPpuABsJJdhcKEYFI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a373d94b9c50b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":47446,"size_decoded":14152,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291), with CRLF, LF line terminators","md5":"6a89285bc6f45a2734438556badf583a","sha1":"c828fe65c62fd82f060e077cff2a3c27b08b9fd0","sha256":"a9fab643e326b57f6041db4227ac6a1edef85fd315c0ad32edc73ccdd36bc802","sha512":"cc1a9c4773fc98e2b6edf5f50d251d478d763a75bd8b4654116a8dd99ddf2558d6ae0b7b78d88ef6a0702f9bd49fa370cd7082ec48a7b7a6a3fb643400f44dc2","ssdeep":"768:JfWKZdypa9Gk93BhpSUwifhWAW96Uh76xpMHFxJVVh76iyIJ+b0vLBT:Jfvypbk93BhEUw2oAW9D7IQ7HyIRT","tlshash":"3623863091ad10b62216d2bacc087618fcd4597ebe6ba76531fc75ad2ff14b4886b30c","first_seen":"2026-09-07T07:02:53.616511Z","last_seen":"2026-09-07T07:03:10.788019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":11,"connect":19,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.654Z","timestamp":1788764556654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0 HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 05 Jan 2026 21:37:09 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=2,i=?0\r\netag: W/\"695c2f05-8ac3\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5FCES5lCakP81EixOnXQBLcDK%2FZam%2B9Tf%2BL3zpMX9WEGxPMe1PhePUtKitdHGex1rwDBuWa2cJFDhKc08VCCLSHBJRV1DtK4GCByhtkTbPQAm7k3Pc%2Fm%2FQ8LQ2WL1fZ8Aw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d94f1c90b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35523,"size_decoded":10022,"mime_type":"text/css","magic":"ASCII text, with very long lines (848), with CRLF line terminators","md5":"4206186d1c6ed67a37fff47ec480084a","sha1":"09e6469393425d9dc0981b66e51b3ed46f2621a6","sha256":"0ed33036553260cb31c7e660567fcfa5c4ec6daae25a3baac3d15ba19327b9a8","sha512":"b1545882d4d759d1a215a8589bb1c970273d826109776fe5a2287b698d8bbd935ea5a8794a7dd5e3ed56f710498971120ce4724be65e84bad263810fc052a2fe","ssdeep":"768:ZZHibtoGwuGHtiYQVimKJkDlvktiPkNPw:ZZHipoGwuGNpQVh","tlshash":"b6f240698e006142a276ce787fa21755fa5500338a0611acbfdca358cff9369927dfcd","first_seen":"2026-03-29T00:14:00.861663Z","last_seen":"2026-09-07T07:03:10.791785Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/themes/krkn-blog-04-may/js/navigation.js?ver=1.0.0","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.658Z","timestamp":1788764556658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/themes/krkn-blog-04-may/js/navigation.js?ver=1.0.0 HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 05 Jan 2026 21:37:25 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\netag: W/\"695c2f15-c07\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6ghBfVZycEg2va2nzqxnz4jmsZs3fgN85h6TjtBXGt74MTT8%2BD%2FW2FafQAcE%2B4B3ACREijw9MQGo1ZLeMtIFyhx1wJTQ9qmk9qt7pv1If0hpt1INtD9O6JKV03F2hHNCLo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d94f1c91b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3079,"size_decoded":1945,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"6345329ae0a43bbbc781658a48064072","sha1":"3deac4942970004c7bfd51dc2e68dd4d59ce41db","sha256":"4f5cae0ba90fd633e411009efe47444bac6942a381e0a633771e7baf2b5805dd","sha512":"56a53db886502414e189a1b6253ec4d812aa3adc980fd6783bbebc8f19840c5facd56d4436a2b31c83ca713742ebfd90056a037eee3b001fd2be6b3ed5b12142","ssdeep":"","tlshash":"2d5113e7368f337b0be93292a3b960e6b738c075a145727a78aac905251045013befdd","first_seen":"2023-03-08T13:20:15Z","last_seen":"2026-09-07T07:03:10.79895Z","times_seen":369,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/p33.jpg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.665Z","timestamp":1788764556665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/p33.jpg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 Jan 2026 12:11:30 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=5,i\r\netag: W/\"695cfbf2-9624\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhvnNjgSv%2F9tnBa%2Fs0lEDRdeMktElMWXXe4wVk9ym1eHiRG1OiG%2B%2Bd4LXD1hFYyjD%2BUlPxleHAlbdsPpk%2FEGiMNxR%2FuXmGU2WrDoLHEbQxyxHNAt7GaVb1mT0odUGe1y4aY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d94f2c92b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38436,"size_decoded":23258,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"Compressed by jpeg-recompress\", progressive, precision 8, 2471x1461, components 3","md5":"ca0e30dc8362f1db26b4bc8d5fcc645b","sha1":"f5f8c10f479dcd542e2f681ffa79ad59cac85a49","sha256":"e649bcd6d24621b058cf9557002d8dce97a86462e2f87959c9eeac7027924d4b","sha512":"968ddefda49ea499927d95ce443d5d198552b32aee878ba082acae89e1641e43b0959179350baa01fa28508f0f63c0db186a472b9c31b77c99638c611d8dfad7","ssdeep":"384:kUsuRxuxW+hk3hnZBsEHH1CKe6RQmIlr9p+vl3qRfPVQnkBdryAcSM0PGY:kpuX++3hZScgK5R1tqT/y570Pf","tlshash":"a4037c4f57550fa7f28ed2fa49170532ef875039796624f011ab6b26bfc36818f6209c","first_seen":"2026-03-29T00:14:00.84334Z","last_seen":"2026-09-07T07:03:10.800105Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/p44.jpg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.667Z","timestamp":1788764556667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/p44.jpg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 Jan 2026 12:11:33 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=5,i\r\netag: W/\"695cfbf5-bf82\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=heX0aHI47MqeQ8w77FxRgzh6mKvzZ8HchmFnIhWau6izTxBNvwy5oVj9CvMo9%2BeTceE6Cr8VeKk6hgxs7JLD75NulwI337p9WW6u24MSpqrIZ8pOsNGqRGyiIVJwlxp%2BSRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d94f2c93b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49026,"size_decoded":24462,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2465x1476, components 3","md5":"084d8147ec4a2b80fed49f463ca4e352","sha1":"fd319af413afb5d5cbe73060d2dc8ce9a845c9e5","sha256":"2bff8d54e474e4243c8a909ec1e60aa9e25d1a6e01301123f5975ca8dc38d704","sha512":"348752d9e224ded4e5f2c01791e618d0720bd9faf3500b735b19b8d948b730d548fea490d1662d29cfbb4c0d62755a445111d3e23addc27df4c050f84f235a59","ssdeep":"768:UVByp3i5t8b2Gv/dpGqxGOYKOgo0Es6eTT:W1W6q/TVZYKOgo0E4T","tlshash":"20234b06e8cccc95ebad8dfcd74939649db2c1d09b02c54bca6882a77d6f3c47c691a4","first_seen":"2026-03-29T00:14:00.831935Z","last_seen":"2026-09-07T07:03:10.801005Z","times_seen":3,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/home-1-icon-3.svg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.810Z","timestamp":1788764556810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/home-1-icon-3.svg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nlast-modified: Tue, 06 Jan 2026 12:11:19 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWHflESwTedY3jGsL%2BQ2OKzKDFZR797i271Bokjn%2Fdi8LuqADfonv57KSSpWHSHOWk6osIak58z17vVpH4Bwws9yagOSSVPCdBMyIAFwQpMvllrn2kn%2B4URtl9CjhRRUKJE%3D\"}]}\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"695cfbe7-bf480\"\r\ncf-ray: a373d9501ca7b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":783488,"size_decoded":567146,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0347d95951474575bbd622c877f3739a","sha1":"a2113b13af3fb712e87fbe0de8781464c9cddeb1","sha256":"3ed9ea8a77e5754e60aef879174b1008f9fa09661721e1acc168285cc24786b4","sha512":"b80e128130bf19084cb33dcdb1e538bd85512ebb6ce5bad7c26ab9e5df710740c0f901f5332d5a8ed0d492fb7d5b5ac14a96d45e25517f7e26ebc13ba8cd5614","ssdeep":"12288:5yZQT54Gf8fPQ6LcEnVR/03Hn+gxQfO9buvmqDo1bS1L9hgFyigxTTdiYPVQMyqQ:kQu8MPQ6jVu3+zfOBBqIS1L7g4PxViYG","tlshash":"88f423b55e06be8dd78647aca2dd6cca3dbc27b75688c3c8360c761250d3740d8de9a2","first_seen":"2026-03-29T00:14:00.862918Z","last_seen":"2026-09-07T07:03:10.801955Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/bg-kr-42.jpg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.805Z","timestamp":1788764556805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/bg-kr-42.jpg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 Jan 2026 12:11:06 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=4,i\r\netag: W/\"695cfbda-b2c1\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BDTWHLIOce5p%2BRIUVSvF%2BeXQJkQms2YKpiTjTxU3zlhTFpW795Vn3g%2BO8skskiGDijXxIShzxTHcDmpeSoFRk8oKQKFbFReYUAMxIrN5rwRmNkIApCdnwePWy9sJvRWdvs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d9500ca5b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45761,"size_decoded":46458,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x384, components 3","md5":"d4d3ab0c13189d91fd99dbde17cbb794","sha1":"3706341bf6ab52f114a9d701190cc49abed8d8c4","sha256":"54ab9eefea333f62133fc76f6a7d0bee78261c9f1f69c26dd26ddc12bf4429da","sha512":"c722db31da47e12dba7749791071dd258860351a38469a3abd1b36d35543e69ba1ce81157b6e97b90dc4d2954e9e28fa355bcf79f0d08c0a92b11570f3b5f72c","ssdeep":"768:/8ZlqA7rVdEke+7MLGc0vjEPfoqL5x3ESq8Hbns92HNjfREx1FIdzUtGX5CM9sOw:SMA7rHEkZQK6oqL5B1q8Hbns9UfWx8di","tlshash":"6223f2c777ab90e75616f7b8c2ffd7d6409aec039628d7013367cc6b2a54a4c4781542","first_seen":"2026-03-29T00:14:00.853448Z","last_seen":"2026-09-07T07:03:10.80283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/home-1-icon-5.svg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.812Z","timestamp":1788764556812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/home-1-icon-5.svg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/svg+xml\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nlast-modified: Tue, 06 Jan 2026 12:11:27 GMT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QgQV%2BcYjA9YZNQ4PO98D8JtV6MoXGTAL2Argj8cYSKUaEkmPgomug9Wu7i9JnB3bCUW%2FVFdmBRzfaM4HxbcFmaLEQTbBiNcKmuCvT%2BUqkD0n9RS%2FEdbdZGDEgZe2Dw6yjW0%3D\"}]}\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"695cfbef-bfd22\"\r\ncf-ray: a373d9501ca8b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":785698,"size_decoded":567040,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"694bba355c1fd5ba39529660f9a56cc5","sha1":"76aaa677bc7d2da3386ff10f1fd8c70b8110ef5d","sha256":"bca4e986f83096923736da2bda423e2cfa2cd81ba17a6453044b034ea3ea56d9","sha512":"e421117e4063cfcfa22fffa95499fe0bba64f3f232b1849d6ba863fb9b80f30478206ae7c04e40c688ee4150eb33ca709839465bdf0d096e0e7a2950c75fb445","ssdeep":"12288:oyZQT54Gf8fPQ6LcEnVR/03Hn+gxQfO9buvmqDo1bS1L9hgFyigxTTdiYPVQMyqQ:tQu8MPQ6jVu3+zfOBBqIS1L7g4PxViYG","tlshash":"0cf423b55e42bec9e38647a8b2dd2cca3ebc27b76684c3c8361cb61250d7780d5d9c61","first_seen":"2026-03-29T00:14:00.855702Z","last_seen":"2026-09-07T07:03:10.803675Z","times_seen":3,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/bkg2.jpg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.816Z","timestamp":1788764556816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/bkg2.jpg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 Jan 2026 12:11:08 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=4,i\r\netag: W/\"695cfbdc-2e710\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DL3yNGCxFCepp7jgP%2FQxofZdKjLFaXwD0k5xCDOl2grvXlo5gIOwB6ccechZNzn3RvUw0PPNnkz4jtqcWs%2F9agb8fNdUu6sUk%2B8yIDXaRXCv7iQ3gJdpfAAsWIDv03LUJJ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d9501cabb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190224,"size_decoded":190613,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 877x620, components 3","md5":"76ac830ff19ddd5f4d857d7eb0f837bc","sha1":"94a8d7bcd67f311eaede798419a0d3d5094c4934","sha256":"d2f30be89ada25601af9cb75742a87df509fb16cf3ed5bd9b59e6deae813f467","sha512":"cb52b748dbdc153527831c49331c5a3cb1abf7c6ef2db2f13d204465871e194780cc5e8347f62b0f20bb7825c012eaf8c1c85b0980a4a084d71484368c33cd36","ssdeep":"3072:yFAByH8TIb26JMuiG6f4G+bqF4/f3g/GAEa+thphvGoJLlojOKfVQNuFa9Msl:yFfH8Q26JFftq2X3tth9JLlBzuuPl","tlshash":"3704230fa4180a3cf63ec5735a27b2d4b9d7d17aae20e41d3b6a87e861d52f0d105eb0","first_seen":"2026-03-29T00:14:00.864052Z","last_seen":"2026-09-07T07:03:10.804455Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/bkkkk.jpg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.818Z","timestamp":1788764556818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/bkkkk.jpg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 Jan 2026 12:11:10 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=4,i\r\netag: W/\"695cfbde-11b9a\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RV72FQn8W6LqGiv2iEfQ122xxJrjQkrXv3XIHkJVzS00NtGLJBQYNPhm6v97dDCOecilQcO%2BpaGaLK3OAkcKNtmwHgtli%2B5d5vqpt6vY9X0ThB7qk59TvOPEiPN%2BIs3a2uQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d9501cacb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72602,"size_decoded":73234,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1068x712, components 3","md5":"8b0af2451aa8e5bea2864584c2cde407","sha1":"56e9dab1fd7e07b30293b5566fa26ba743b1001c","sha256":"ccb0ee479467d12e0d5592c52730e8cfa0e5fd0609fa9aeab8b0b3f7a0cd20d6","sha512":"99b1d027aaace8e078fd6ed5cc1c6b9a74caf34229d8605b180b0400a1a0718715b3b5ed35b83a1cc3a8259f14d1e80784198e522575ff057d964725642101e7","ssdeep":"1536:PTODK4BAnfIIZ0X1fLhhl6eMfjH0dmgagPKKBXVMAwB+pHJ:PTaeQIZk1fdGfjEmF/K1IB+ZJ","tlshash":"7a63026a4490c761f3f1cb8ddc29af1893c28a1d7951ce5e074118bfe8e7bc1e1a44ea","first_seen":"2026-03-29T00:14:00.84645Z","last_seen":"2026-09-07T07:03:10.815103Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/2026/01/cropped-favicon-180-192x192.png","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.928Z","timestamp":1788764556928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/cropped-favicon-180-192x192.png HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Jan 2026 11:55:27 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=6,i=?0\r\netag: W/\"695cf82f-40e9\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52fxZ%2BrF4GlDTfedD24wsMHiidZrXHbOxFeOa7tlAPM%2FF57HZCZhqfjPqo%2FdXkuHUBVpkJvPXjHTuyCy5sDJEmPawcdBh98oqcyDINnE60IWeWci%2B2YN3gzyvPLhl3v1PPk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d950ccbeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16617,"size_decoded":17211,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"a2275f0d1354f5b62fb0f5dcb3033f81","sha1":"fcc326a27ea9cf2dd1fbf1fa197e466d85d8d22e","sha256":"fb32939ea6a387958b6f0313c5bbc96e85ec80abae3e202993a894480e882f74","sha512":"7b9dcf2d1917838378cab729a0e50fa020fdf20cebe11df537d69624f22fa05dcf41fa7d70bffed8f10d3691840fdff7ffc18bb05995bb2246809ef218e03a1d","ssdeep":"384:C0XC1UKjb1VtHc0VNnYQzuwh6oecox6Fqf9BQjiz6Z1i61:i1XbztH/NYQCwh6oXyvSiGZ1h1","tlshash":"8e72be9da9aa987f190fed74b403f83296d88587de12663efc38f0835f056e1c2b5800","first_seen":"2026-03-29T00:14:00.860394Z","last_seen":"2026-09-07T07:03:10.819294Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/2026/01/cropped-favicon-180-32x32.png","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.929Z","timestamp":1788764556929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/cropped-favicon-180-32x32.png HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 06 Jan 2026 11:55:27 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=6,i=?0\r\netag: W/\"695cf82f-4cc\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRow3qMfIJXjEi8cUW0ErrtaS5iy31wy2pKowlW5u04b%2BSVo4%2FiNXd3TqEiWgzUkXL5GEN0I04faL8LoAhL2Qw%2BWlbFqG%2FCcwHrDKZXazpvGZQJ2hRhTlyD0PW%2Bm%2BRBp%2BNo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d950ccbfb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":2040,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"494429f25a9d209ff09272b229d3a7e0","sha1":"7921647bcbb617aeb2b708f298c27da1be5e41ac","sha256":"e8e9d6b7a0a9808d234f0d7e44500d62bcfec51ff9adc9dfc75d521bb93a7aaf","sha512":"15c787d291e2750620cdfdf8bd8836cd7468b7c58d432f9cf3afcb4496494aa0729a3df0c7eb203477e40b394d118e90c6275cacc33fbbd4eeffdc7afa449421","ssdeep":"","tlshash":"de21ea8614513028ca725a01f6b934e9d67fcda541545fa838dff8746b31e357dd0c28","first_seen":"2026-03-29T00:14:00.859138Z","last_seen":"2026-09-07T07:03:10.820579Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:37.280Z","timestamp":1788764557280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/\r\nCookie: _ga_04CWVCSP0J=GS2.1.s1788764557$o1$g0$t1788764557$j60$l0$h0; _ga=GA1.1.668967483.1788764557\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 09 Jul 2026 20:16:27 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=3,i=?0\r\netag: W/\"6a50019b-58e0\"\r\ncontent-encoding: gzip\r\nage: 22\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xr6sTFFAiYiCmdCRDzvqmHHX%2F7UL%2FBEtGYJWPa3LNAMzAjULRks8lr9mgNT2KXg4w5eTgD%2Fc7Iv2RP0dioELvofAtiMPHInyPLvieuLDh%2FYo%2FhR%2Bi7LRJDj4AxKO8YSWfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d9530d04b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22752,"size_decoded":7118,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-07T16:20:50.144762Z","times_seen":50782,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/p11.jpg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.813Z","timestamp":1788764556813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/p11.jpg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 Jan 2026 12:11:28 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=4,i\r\netag: W/\"695cfbf0-2b2d0\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2F2obufA2N4bMIXBWih8V64rELZu4Vp0w7ZgE40yEvRHeCm1pIhJQ%2BJuSXVenLHsmG1TCFGvYjmpOMLJB5lNArN1Q%2Bmum4VFhHWg7oSYYQeFB2Ze%2FER%2BqStIkY609fsIxd8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d9501ca9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176848,"size_decoded":162223,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2278x1369, components 3","md5":"fb0dcc25e86e7e1fbb6a44f2e07de52d","sha1":"1d65cc3499274a3c97b77d68d278b25a1e17c5b0","sha256":"32649293cae2f27b974e88a7285d69f4f5cd325fdbc9dc9714e944e79fbc5579","sha512":"8377cf25760c7653ed19a4983deaf8402f0a136536268ddb5eab7cb3e025e0d17f93512a8613e4a2e1a05ca45323cb4c5981dd0e154e8e908d43c0a6fe92059c","ssdeep":"3072:YCJ6KoiQveXEZbHQjkjJHC48KEu62kun0ze4aw4eCW2lNU0l0:YReXEHQcC48KEu6upXMEWH","tlshash":"030401a8bacbadaec29127beb12f390dec6e03d6dbcd5441b2431342184777e3615907","first_seen":"2026-03-29T00:14:00.837732Z","last_seen":"2026-09-07T07:03:10.823665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"darkbrowser.pro/wp-content/uploads/pics/ftr.jpg","fqdn":"darkbrowser.pro","domain":"darkbrowser.pro","tld":"pro"},"ip":{"addr":"104.21.20.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.819Z","timestamp":1788764556819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"darkbrowser.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 17:37:50 GMT","end":"Sun, 08 Nov 2026 18:36:23 GMT"},"fingerprint":{"sha1":"AC:A6:DD:CD:6A:DE:2A:F7:46:50:B0:7B:E6:9E:9F:AB:92:E2:8B:AA","sha256":"DF:06:F5:25:A7:86:5F:FD:83:E5:40:EB:43:A6:32:1D:81:E4:D4:C3:BE:53:42:93:71:F1:99:DF:30:44:24:C4"}}},"request":{"raw":"GET /wp-content/uploads/pics/ftr.jpg HTTP/1.1\r\nHost: darkbrowser.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkbrowser.pro/wp-content/themes/krkn-blog-04-may/style.css?ver=1.0.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 07 Sep 2026 07:02:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 06 Jan 2026 12:11:10 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\npriority: u=4,i\r\netag: W/\"695cfbde-18dea\"\r\ncontent-encoding: gzip\r\nage: 21\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTFDnvJOjDRgGvBeAwptdNsk2QchKlTDIw9dQb6XhYapFSfj9AePx8hWGxjL2XuLoBH9R8JmTeb%2B3dfdVR2Ka0cGJuRw6Z7FBvlKbhCdTZ4I%2FSAjwPTC%2B6DArEqpW%2BYip%2FY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a373d9501caeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101866,"size_decoded":99878,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 626x376, components 1","md5":"045869e25c1bc544f99c1dbf5c76bba7","sha1":"246029bd774dbc792997e853c3d432d0f90efe0c","sha256":"d6aeb33ef4a8b5962f573fbae8f9b8b3c2943544b4d4f21fb2b223b58cb29d11","sha512":"71a886e2314ee45440b918797d659fef681e5a32d7a0daf2130652d402d682f66c33b21c0a0c4dc815d5aadf2b044dfdc707cad250f6dff11e7fe7be08c211b2","ssdeep":"3072:sLFUmgrMqz5QSPFvbP2CEhh0E9IzvajhAhBnag:sL2mZM5HPFvbVEHSaqPv","tlshash":"1fa31203092266b3d05558764e324b9b95408faf779a31d6ed30fc3ba367ec626c5bd0","first_seen":"2026-03-29T00:14:00.848434Z","last_seen":"2026-09-07T07:03:10.824667Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-07","alert":"Phishing Block","trigger":"darkbrowser.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"darkbrowser.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darkbrowser.pro/","date":"2026-09-07T07:02:36.847Z","timestamp":1788764556847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/mulish/v18/1Ptvg83HX_SGhgqk3wot.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://darkbrowser.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 07:39:37 GMT\r\nexpires: Fri, 03 Sep 2027 07:39:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 343379\r\nlast-modified: Mon, 08 Sep 2025 18:00:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29968,"size_decoded":30781,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29968, version 1.0","md5":"50220d0057de0b9e5dc8b4fb36ee97a9","sha1":"4d0c1135f6767c3945e596c25abf69919ba4b646","sha256":"8d1d33d6beea5a722b8f336d79c61c07405949457e37b5e65454c72dc10aba1a","sha512":"e305c7df33c9c99a62adc9637eac538520d846fdafffa738095667c8eb5326519564899211099ae4f39b63fb6d62f9366553861f101d797063447a61be8d1df4","ssdeep":"384:u8H1OIFdhnzrgxPfQPhTI67jde+X+7LEF15v/+cVur4KlRNME5BSwkR42VrSebai:3VOargxCRdpOW73Q/NMEqw8XrS8Bz","tlshash":"f3d2f2784521eddf2ecff7167a43bd92208be67b88f9268d92c5601b21360342c1dde5","first_seen":"2025-09-09T02:39:13.146786Z","last_seen":"2026-09-07T11:44:38.951027Z","times_seen":9908,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":35,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}