{"report_id":"066564b1-db98-4e32-9bbd-c3f20106925b","version":6,"status":"done","tags":[],"date":"2026-02-18T13:18:54Z","url":{"schema":"http","addr":"krakexn6.vip","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"172.67.217.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krakexn6.vip/","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"title":"krakexn6.vip/","dom":{"size":78696,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (42993)","md5":"9a79191a0094cdbed5d3899bea528e37","sha1":"fbe515655ed3d3a80c9054ef602ba916a6d8a873","sha256":"819eda153fb567cb477cff19c13518088bfa5aba032189cc5b58ca0f219fbd6a","sha512":"4018ccedf68f472496125535858f86a47d27a7729bd5ed1e7eb07fb157041a2ae731cc7a748e3d2086e0fa968400ce53f5aae8fd70d6879f733419316608773a","ssdeep":"768:ItT4WL5v1GTkHHKuL2LRwVgnGvuV+oY9vhF:DC1HYWgmoY9vn","tlshash":"d173c764a7c1407706b78fca95a1be6c6286e36fd166d098b2fc43d81fc2fe4f546490","dom_hash":"domhash3b19a5aa6b5c38d9b3c8fbf11c4fec58","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"krakexn6.vip","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"172.67.217.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T13:18:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"krakexn6.vip","ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":246,"request_count":123,"received_data":5158049,"sent_data":55167,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.reown.com","ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-28","domain_rank":0,"first_seen":"2025-09-26T22:04:59.160341Z","last_seen":"2026-02-13T11:15:06.487856Z","alert_count":0,"request_count":7,"received_data":338255,"sent_data":3563,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-02-18T13:18:16.242269Z","alert_count":0,"request_count":14,"received_data":32912,"sent_data":8221,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"huobicfg.s3.amazonaws.com","ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2005-08-18","domain_rank":5277579,"first_seen":"2021-11-22T07:40:25Z","last_seen":"2026-02-09T13:47:54.944484Z","alert_count":0,"request_count":16,"received_data":180818,"sent_data":7250,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-02-17T00:47:22.262732Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.iconify.design","ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-02-11T23:30:55.979754Z","alert_count":0,"request_count":1,"received_data":1843,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krakexn6.vip/static/js/ref-826e0ba1.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2e132ab88957c55a3435e8f009fc8518","sha1":"1d51a5ea26f3171186efadb3b4984462078796f8","sha256":"07a9877e1a66c2405b5df7e17a832afa52706e88c777d1f08385a2d1315de871","sha512":"76bf398b2e46e52978f323c98e0ef6689463514d0c34eeb00de10a5ca56b80ae6da8ef78908ff17f8134dad26668e05f468e17f755a7ac81f8cd85812d1c9301","ssdeep":"","tlshash":"e941039773d801d212cac6e6fc37892af11131483a25845cb0ad6bf7e8306c791bddb5","size":2156,"data":"","first_seen":"2026-02-04T16:46:53.874417Z","last_seen":"2026-05-31T17:09:56.213446Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-d51bd663.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a19607a0e1b15c69b360cba28b08cd0f","sha1":"375edb41e0cf4bba33779cd2c2de454f2f344556","sha256":"58612615012da8292e218083b3448403718f884ead7f3e3d7ab933e0e9ca2eb6","sha512":"9712a82dcc42d3301c97fab1f6f2a859ff8891a5493b9a2b1de694a8ce298cd6d5d6f781a2dbc52448b9a0cc2d29a28254e9fcf556ea7a3ae62b7ae3955f330c","ssdeep":"96:GRhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GRhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"58a1b6f775a7e7e0951787b1ccf73811611b3cb6bb064e0aa58caac8de16184868ce10","size":4843,"data":"","first_seen":"2026-02-04T16:46:53.906874Z","last_seen":"2026-05-31T17:09:56.251977Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fc69a8b8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a19fcfb4babf16e983b165e96ff20d24","sha1":"27fcb0f3fe20e107a99565f6ba4aae39266238e1","sha256":"7666d359e9a42908994b110abfd09d4487cc9eb7b826ebf03dbf6b95764727b1","sha512":"4f196e2610b6bd3398ae1f6d9fdc7b36dbfe2098c612bf5a5ced1df5baff1a2010f903275bf4f5fdf6f41bbe1c6d09637474caae0447a63214dcfdd0c127d2dc","ssdeep":"96:0jgJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0MJTFyhlqTsd9fTOsy6Xd","tlshash":"fba1a5a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fad088d8df299","size":4963,"data":"","first_seen":"2026-02-04T16:46:53.784368Z","last_seen":"2026-05-31T17:09:56.21646Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/send-7c4c9d57.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7489b16b42f267c218ef7cfbab4684ad","sha1":"46e987ab1c1b6a59847022905fc0831bb3fdd98f","sha256":"5ab061ee31053f1daf73935b97a6583bd34e955555f06be45d9bd54c359decb1","sha512":"ce52ea00199b76f0fe058a57cb853647dd545e1cae7a58c3e7be5c2c8b50910475b467e2615c5447381a0ad0f3661cabc2088ba2260399c64bf3aa861d4ee009","ssdeep":"768:haYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:kYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"29e2e89433fa281d19a7516dead69e006331501bc11cc5fdfaeca2f18fa9a4249fb734","size":33591,"data":"","first_seen":"2026-02-04T16:46:53.768699Z","last_seen":"2026-05-31T17:09:56.22894Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e1f7db2a.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1a1219d53a3a4b710eaf1c87840337bd","sha1":"d09d5123379f46bf1681039eea03d6965b3a7f3f","sha256":"b9d3e7f5b216275240b008eada5d7ea3e0965ff73888bd7db184aabf4abd5533","sha512":"3e570fc42cd8c4a2ba58460cc3cf0e8003ceb7d3ea3cb5f4cd483275cb3c7dc1a61edeab5d10e85186546a0d4fb0e941816d3bc13b88682dc2537f5142a62301","ssdeep":"768:OOzlkEh6WjzDJ/NCYUH6Xi5QMR+gXPLjNHA7DGlM4+DBL+FUytQLUeD:Dzl5h6kwHiipRFTjNHA3GlL+lKFDCp","tlshash":"fae2f8c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","size":33100,"data":"","first_seen":"2026-02-04T16:46:53.770496Z","last_seen":"2026-05-31T17:09:56.314919Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/index.html#/Home","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-24T06:14:46.498327Z","times_seen":903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-67b7a897.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"268c1995b05e1bf61c373f51b9d419d3","sha1":"9a97e9cd5fddfb1dcae873dab8cd3e9cc56f7305","sha256":"e40ca7f06810fbf4384fe5e760a7a391b415dba025c06e1499bae9476dfe4b94","sha512":"bf57627fe27862a3d0adc97e82f2fa8148991dd628a23870c14c10e00e5811715c74c761f15994ac535c7806bd123f4a7d338d6f46cc8d06730269b5062df4af","ssdeep":"96:1JvHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1tHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"0281c5897330d952151a8a6467fb8202373a50274226c4fcb6cd9af84fffe459b75b70","size":4104,"data":"","first_seen":"2026-02-04T16:46:53.808553Z","last_seen":"2026-05-31T17:09:56.199585Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-5ba2403b.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"af6fbe24712cde764ac18f0390ce5a36","sha1":"42da477ef31a7c14b9553b29e5ab01d1df320f16","sha256":"d275eb8d9bd36fcdf07ae50de4c32b0e958b4225922ceb8a570d683b1dde8562","sha512":"2f72bf1c2072a4c0a961c5761902f0975891f4967cea7304db4262903aebd6814d5f7c96fcecfd13b3fa6a1b39ee7a81240f24e24154d8305e79bce511702021","ssdeep":"96:cp5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"7e81b868b37d217979c390588d366d01d335401ad11ec9a07bdca0e78f9a2ca9db7772","size":4173,"data":"","first_seen":"2026-02-04T16:46:53.794723Z","last_seen":"2026-05-31T17:09:56.227414Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhCheck-1cb2a956.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","size":2110,"data":"","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-07-01T21:00:47.745625Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e569eff5.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2562ceb798d177b66d9395e2981f7dd2","sha1":"8e0baadcbe7a13cc8813ffec842d9190246da0dc","sha256":"a8209a3eca8c528ad27217f5ede68eef9d79d86ec234a06fabdd18c0df83e17a","sha512":"b9be842f73d2cd40c2b1e4d7e85867f104662899836ec5e1c5fd111160e5a62032b748e48abeae5bc98aca8d37781d0ba8329336853f3703b8b31a90b84d6983","ssdeep":"","tlshash":"c1518221f042ae3cf3b750652098780865410fa899646af7b1ae5e0f23d9d726b9f738","size":3101,"data":"","first_seen":"2026-02-04T16:46:53.776329Z","last_seen":"2026-05-31T17:09:56.335162Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/SwapController-128e9645.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3a23b35cf6ca988ab9aeb279a1e26d12","sha1":"df30264fe8c72bd9e210c1383b04ee04fbdb50dc","sha256":"18e8384edc749aaca88551841f732f14a376ff18daf940109d10ec12732a839a","sha512":"4669d2966d2cfa8c2f924439adac24c805d28b2fea4d934f18b74b116803a1858ebdf05182eff503d4b22b98c99c799afc7bc9646c6d897575ec4425b0be68b8","ssdeep":"384:N40FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:e0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"c05263a27360b676471e729879f9131025221cd4e86eb4ece8ad05e30ff159f1aeb921","size":13816,"data":"","first_seen":"2026-02-04T16:46:53.875997Z","last_seen":"2026-05-31T17:09:56.212525Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-a147cb61.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"909a97120c66fa075b925f65a92fa6c0","sha1":"89842ccb9918db72cac69e7fc4d9e14d5ca82bd3","sha256":"2bc3bdaca275aed8e5d78c82d9df75246d63f67efd0e2214ddf3a33f25116f05","sha512":"f1695a90f4b9bdb9143b06f302686264704e27ede117c7fa86df0aee6403f7e66c67d2935c05863e813a66b7c9e3420f2011ad73d12bf8f2f0506491ac3372a5","ssdeep":"3072:i5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:viZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"3c24f8546bb06d186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","size":229987,"data":"","first_seen":"2026-02-04T16:46:53.826072Z","last_seen":"2026-05-31T17:09:56.259861Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/index.html#/","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-24T06:51:16.197268Z","times_seen":6938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/if-defined-49fb0c54.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7d621361c3cf5a5b3789e2660e55c8b6","sha1":"74b0e2b729580256ee560741bae5a18179dfabba","sha256":"2a7e9b535a681936d31c928126b80f9bf4ff8bd4d5b2884d585f225f9e8a27b7","sha512":"c914b923e869176389e5b1f12fd9346c12b732f8ae39cb4e8a404d518d259bcaf244cc68748b789a03d562c7279708ec257d015f56f19ffb3eeb385aa72cdae4","ssdeep":"","tlshash":"96c08c23a83842f308ca438ee824dc4a5010326eab224282f028235648721805aadc06","size":161,"data":"","first_seen":"2026-02-04T16:46:53.781255Z","last_seen":"2026-05-31T17:09:56.225633Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/receive-316eb367.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46b7be9a4e75fe3e4fc12e8ae4fb9f79","sha1":"659d02ced628ba643801d574f231b35f47aa5ea1","sha256":"a041868e1060bf435465819b626e55df7edc54b8e9d6418c0aedbbaee7d51e3a","sha512":"9cf37e1b61ca0893c44ff732164606acf71ef6f984d4ad88822a0017fb1002672ced2f1f48f0c063b129947c30c05c5fb2985201bd1360ec69e5c26130c51334","ssdeep":"192:sIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:sd23vx30IXuTjmpqAY4c","tlshash":"4dd1d65659f638adb803d0981e969a00c131404f9539c5fdfafc83e5cfe968689ef722","size":6621,"data":"","first_seen":"2026-02-04T16:46:53.886927Z","last_seen":"2026-05-31T17:09:56.229632Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-d4dcf123.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ccc0ba67ac93644611c4eb010d65cff5","sha1":"7e8ca42da2f9b8b46d4440ddc153e63e6e88e995","sha256":"0fe717dde012e8c497b02c33a771cfa51f1d53b940e3fc5b3ab73127db9b1e45","sha512":"55000d942a9362802b1f2f74c6c2789227ea7925a0585e380710de32a185bfb3383bec4ed11918bd992ae44994683b9015da5bc0941a429c498e404f9ce053b9","ssdeep":"","tlshash":"c8513095b213a8f7345261f9075f9315662438130aacd628b8dca596cfce7efb434523","size":2511,"data":"","first_seen":"2026-02-04T16:46:53.797595Z","last_seen":"2026-05-31T17:09:56.198599Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-cd74709b.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0fc74c900be93cca0373939467165043","sha1":"f2bb471fb224a0187844bd7cb409041a2535a6df","sha256":"54963202a423af8bbdd469ae49041855a08168972d6c49ef9a743b87a202bb40","sha512":"2f89be6b4d72668f91848e4f4415028e8c853132f3cbaa537129df8d3c6577dddc6bfda9ee467dc9a6b4faa2da63cb6e18d971e360c0c0e25660ae2dce336fc1","ssdeep":"","tlshash":"fe2136891679d7f105859594c6e9ad014125051bcf28d091b3cce1dd4f5ddc4c6b5b33","size":1384,"data":"","first_seen":"2026-02-04T16:46:53.816872Z","last_seen":"2026-05-31T17:09:56.230373Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-2886c057.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4ca9002140204d97de00ebe56e01e19b","sha1":"456642a96418b326d0f6771d2e42b3ce334eb6dd","sha256":"716bc7005c8ff7f6fbb9110b1e069f351d35b425d53a25a7184a62f22dd2b2b2","sha512":"a46935cbb735226279523607023570d03eb72249792469f763f5faf086adf9ad45e91f2be3fcfd84065898c2417413affa2b9b648e5cdb8627476b65a963a725","ssdeep":"768:3nfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:K6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884a8fb4da8d37f79e6a94bbf2c","size":29815,"data":"","first_seen":"2026-02-04T16:46:53.851732Z","last_seen":"2026-05-31T17:09:56.20372Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhX-3214edf4.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","size":2498,"data":"","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-07-01T21:00:47.813552Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/property-6708c68b.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","size":17735,"data":"","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-07-01T21:00:47.804729Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fb848e84.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09ea3f652980ecad9b5e805c6bfd8c54","sha1":"f87a2a4adb6fc4465789a65f7ced64bd48c3a334","sha256":"73a2b75afd236fcf0210f14513e0cf1467dde60789969a95e80003332a7b3f64","sha512":"6335872a972e7aa6255456baae6e496e5717eb23f913f31b4474e0c588ca6b38d40ba983e9a27c63a71421dfc310ed999e319ce4009ff5478cf8f1e1f001f395","ssdeep":"49152:KL3j5T1gIH3wo59lo/PDXgRw0ERirdxQR1lc38NOYw21SnRKEhlhvlbp+HAX4Ylg:8tVxbpjX4uyBCBNk+XHvJaX","tlshash":"bee58e807295b47507a755d4a46b1102f1385ca5b05ec0a8f6ec9cfb3afa889c67ff38","size":3202851,"data":"","first_seen":"2026-02-04T16:46:53.92931Z","last_seen":"2026-05-31T17:09:56.377912Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/index.html#/Home","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3e352e40da965a477c73b85f45fcbcfe","sha1":"3e723988fae01e9002cd221d32d0b80fc932dc85","sha256":"5437083c1c0938d596758b071b379432c6722f887cbe2dca49cc5dd12e4f48bc","sha512":"36bd9ae9981675720b34b16739e5bd73967018d36cffaf325c4415dede978a5c8950cd9ee99567264cef03b5020fc26def12f1274befcfba2f680291e9f34580","ssdeep":"","tlshash":"e2c08cc4b0c22d003a02a41024bf34e89024402670481b028cd4e8582e230b08233e98","size":140,"data":"","first_seen":"2023-05-19T17:54:23Z","last_seen":"2026-07-23T14:12:00.7305Z","times_seen":792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/index.html#/Home","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e0a7343e590e4b2e68fea466ac533796","sha1":"157955af910b602def2fb7ccb3cfc2349619433c","sha256":"1f4e9a9aaf729ae7aaa8082a6c4ccb3082cb5bca5d7ead0f6d129b28ba4ce60a","sha512":"fe989f835a81f1d2f0d611e0750312a9248350632f70aad49f9d0113d7d1ef287e2bb5cef46867bdeabf3a5aaa6f5b80ae07eca85a7ca81ac06e1e0d5b1dccfe","ssdeep":"","tlshash":"e6c08cc4a0c26d005a52a61110bf24e4a024442b70885b028c98e84a2e220b08233e98","size":142,"data":"","first_seen":"2025-09-06T11:46:38.61477Z","last_seen":"2026-07-01T21:00:47.826551Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-056337cb.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dcdf667bc73ddc52e95112b8a856e804","sha1":"74165988f75004fcd5581e9259b72f88f5e943d4","sha256":"93bf6f78236afbe56c381a61c6fc23330c35bae5308c8c490c812b9be64c5554","sha512":"decb014c9753b0afbef4b5d399f17fde03e42dee75eb46e17362cc3a4bfb8bcd972dca0b35bd8765faf77164472faace278ab2a4b2b82a9deba5e42acd93b3ee","ssdeep":"48:qLAhhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:oACgEQM0o8hJwisSPjgZDIKL","tlshash":"278125c57fb825e53713c060aa9e4c25e331a023a8299f2e7a9db0f88f55643781d373","size":4166,"data":"","first_seen":"2026-02-04T16:46:53.782128Z","last_seen":"2026-05-31T17:09:56.236223Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-f72c7cd8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2b95bf4f272eef6ccabe6dd064b8caf9","sha1":"e541bc7fad14a56d07e8a6d8580b7d346bdd938b","sha256":"4bf7e2fc0b98ef92c1c244a9bbb4311021a6a5523c9191f152e98d7face9bfbd","sha512":"1208e877ca63d0edfac719b6e3e50fc80282c742ceaa2212077e5f840abcd66556f231a3905ea2a626dda60fef8cee6d26592510c35a59c220763a6327925ead","ssdeep":"","tlshash":"d45145c976242f7537538054d19e4d117321b03ae438fe2e36dda1ed8fe99835829a33","size":2813,"data":"","first_seen":"2026-02-04T16:46:53.867495Z","last_seen":"2026-05-31T17:09:56.250769Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-73a416b1.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9a660b7078c745fdaab3270c6fc3e98b","sha1":"2d99fd8689e3af20a4025ae2b1cb2f924f55198f","sha256":"b67214b060229cd6b6f2593dd6389bba5f00d5937fa88caf64f8178258261306","sha512":"aea458487621b0c428798e77f84d8428b86d0d545451bd02d81c3aac804320ff5b3d7ca9487ba1710691f88ad79054a73e80efc6fcdb6897918a7a25be340538","ssdeep":"768:ZlYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:wAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"f4431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","size":56425,"data":"","first_seen":"2026-02-04T16:46:53.884885Z","last_seen":"2026-05-31T17:09:56.256946Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/index.html#/Home","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-23T14:41:15.111569Z","times_seen":2091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/index.html#/Home","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a8333fa4f5a7c115c3d338f715d710b6","sha1":"85d9623120c2753dd2de36578cf1cac587152bd2","sha256":"4812d4d9a9636856ee3e917a3bf0eee7042b1969f9bc5fdb900754755b32b90c","sha512":"96d4a581ff47246c45fa475a2c2874a2a2d2387d7ec1043b58ed94569af99c55647fab01eef77deb3ef15451d5c8cd1c15257efd4c9c67c3dd7e67de9dac188d","ssdeep":"","tlshash":"b3c08cc4a0c23f146702651110bf3af89034442679482b139de4e8993e620f09237eec","size":153,"data":"","first_seen":"2026-02-04T16:46:53.927086Z","last_seen":"2026-07-01T21:00:47.825726Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/HelpersUtil-27422063.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e13300ed30fa2ed75a21c822dc160299","sha1":"7814252007c1a087119f9f2f2851089efd7d92f7","sha256":"f733d9e7e1e6c6d662fdf212241ccedde3ffe337a0aabddc1e2dd16289f1324e","sha512":"02d2694a91315066409253e528628dd6403e653c087379aaeb4e23e6116c4317d34f0ca38a996d01cf8e323e46ba7bb471898b732883a349e996f1dd25f56ea1","ssdeep":"","tlshash":"746145d9f3fe7e26350704a8996d85106336702a291e9f3e7bed53f84f0afc1a856520","size":3196,"data":"","first_seen":"2026-02-04T16:46:53.77705Z","last_seen":"2026-05-31T17:09:56.257853Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-41281e13.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"435ca00c4f345dbcb554c9ae1f29a53b","sha1":"5136cb478d1dc98a99199e1f5128e0eaf8ccb437","sha256":"f2736697b8e3a0873e3b73ff8b49541b3f6b9f3cb589b98f1203776061152c54","sha512":"b5daea056d99d452cff95399e238e6f4a5b868aaf50518cc0c54db5be7313867d12319bd233b701e4b32b3b3b2476bdded612d92521d2cc3d35dd27dcb57b82f","ssdeep":"","tlshash":"7581979ab6771864342b4264fbde4b245231b05e0a1bdd75f3cc12d58f48aa89b4b231","size":3966,"data":"","first_seen":"2026-02-04T16:46:53.763426Z","last_seen":"2026-05-31T17:09:56.2171Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-458e75c8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"42a9d3ff71918637ab1c9ccb78964436","sha1":"618617651161c98e78728fb560458f10f203e7e9","sha256":"79e4b301cf0f80a00e2cb5c1eb1c0de359dae708d0296b2e1df3660bfe986503","sha512":"1afe6ad020737b31722756141b1842b83c9bf9396d3b2b12da7c9c3edee8137a8b0c9dbbe3def73405f5cfdf2a15f29da98e5bdf8daeca4a46dc9d9d2f9d9c3f","ssdeep":"","tlshash":"6341c6442268beb600c066d6c09685005125002c650fc594b7fcb5e2dfaeacdcfbfb3a","size":1908,"data":"","first_seen":"2026-02-04T16:46:53.819675Z","last_seen":"2026-05-31T17:09:56.252988Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-36ac775f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7dc571e1d41872c19d3e477d67867cf1","sha1":"fd5d38c3552d5cb005b2dd4b72b129dd1420407b","sha256":"25899152b3f7de4f92c83755a209ec165df005954b3ac2e92177c7d9d5bc5ceb","sha512":"68d28c6f616d8c2c34ebbff051f58cf2025a58b992ccf121e3544d094c73700b50071e2a367cc4c6d05579695fbafe0fa7df69f1c0ff9198f0880fbae6c4e355","ssdeep":"","tlshash":"943185c2b4d73579b376cd9dc0984860923c0d48f40597eaf17f5c2e2b601c0bb1ab18","size":1814,"data":"","first_seen":"2026-02-04T16:46:53.800083Z","last_seen":"2026-05-31T17:09:56.337344Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/index.html#/Home","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-23T14:41:15.104758Z","times_seen":1739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/home-f7f6e3ca.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc181fed22e1167ff09eb3cfbd4736e4","sha1":"22f69fd504bd84065f2258a483ce60c214c6aad4","sha256":"d7ea5e8ecff85d0b64602d9eda14893bdeda7a452276d7cdcc4d3f2c298aac72","sha512":"5f15549489d9579364a61153a705ef896aff88a6d9b628dfb07a057c15772d60bc8b55144d6b62fd659f3a788abd41e5b6aaf33826d7b24606507eef9e462fe1","ssdeep":"384:+yqoCYg+Z0YKJmYyoLD6pS2L86DaiEkR64Q/Or3RL3C38cu9INSQa6MjDX4syEp2:7Tu+Z0YKUF+6pL86aeRu/Or3dC38cuij","tlshash":"dca2ead9fd0ada3eb5f209944598000135141feee52181d1b4fd1e1a1bebe7e13afb2a","size":22771,"data":"","first_seen":"2026-02-04T16:46:53.786814Z","last_seen":"2026-05-31T17:09:56.240705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-7b62a5ba.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"55de4531b10d61783e873c98c4180a60","sha1":"246e52e69588c3d6812352adb23a0d0f9d14a5a1","sha256":"b26da8ce31d9123427739c7c6ef85c819e84a58b0941a18467b47e687f9a226a","sha512":"a9072e0a7ed3b8e5e1fc3b1d6eeac063779a42e3e56ea419ebbcd15d1f74ef45691e5018ba780e5d2e076ca0130108ff41e95ed8c8bcd26e71b2dfc790836a20","ssdeep":"","tlshash":"1a511088bfb43d63371bc065f0ae8521e335a03a982c9e3e739d52f84f59682555da32","size":3015,"data":"","first_seen":"2026-02-04T16:46:53.869137Z","last_seen":"2026-05-31T17:09:56.24937Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-23a43da0.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"31d761f11a6a640da2a8ae94065fed2b","sha1":"7faa07c2b610af19d7a7c9bb272e7b61e5bc9c67","sha256":"c6824b22eee43b6a27e5c14616d88cc4633c81432119b0e9a21f240a385ca739","sha512":"7cda7f5b1601f17b4420ee2cdf918b94883d116bbe0c97aee6d95bc3bb95341c207477644d519ef574865e8e68abd0e714234d5fb69845b7982000305a5ab056","ssdeep":"96:2Xs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:2Xs7o9KK8ZMY2vcpaC5c7eI","tlshash":"40a144d22daa262a3951d098ee5b8900e321c007d22dcebdb9dca1fccf595c3107e722","size":4734,"data":"","first_seen":"2026-02-04T16:46:53.846655Z","last_seen":"2026-05-31T17:09:56.19633Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-3e85285e.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2f8c56a2cb3b200fe8b27f3d79ae2328","sha1":"904db870c3c853c0d13c8865bd2c6e01ec0d309b","sha256":"8821da40ffdc0c60adb14f1499e72e0cbdd7c69658bec283d256161651e6fd77","sha512":"9342bc44af0810b2b9d51299809fbf87993c4501e3c3f088dd9c14511583728da5f52a2f19b0e55377a9c48475f0b4be94efb05161c509346ab4128b83faf9de","ssdeep":"","tlshash":"f2317389637a24a824a3d0e50269da601235642aa21fca6cf2fe71f58fad4c4653b712","size":1576,"data":"","first_seen":"2026-02-04T16:46:53.881136Z","last_seen":"2026-05-31T17:09:56.215779Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","size":3315,"data":"","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-07-01T21:00:47.755737Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fb575795.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bfbd4d4111a878f1499dc221cc34ee00","sha1":"ea79aa5e373e5732d0d7f954dc18d35482097f23","sha256":"ced931c158dc0c3ab102dc348b126a71ffe88d5894dae2d04337a0007d00e035","sha512":"54cfd6160dd4088372ee8c9c668e763f3201ab5449b6653020a94b0198bcd03e7b4261608f35eb056c1c1cd10247635b6b925e957815fb11a21a5538872e8c01","ssdeep":"","tlshash":"7d516485a666582d520390adc77f4c01973ae41fd029cafeb7dc50f54fba98115ba331","size":3036,"data":"","first_seen":"2026-02-04T16:46:53.772028Z","last_seen":"2026-05-31T17:09:56.361015Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-bd925ac8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"908b4d49e60de0f0eef5cd14e7141dc3","sha1":"ccce6c443afae8fcd004104854e4a6e8048ba84e","sha256":"f0f76ded5e71b63742052fd2ca4f49b68d25e0248e136cfb90198e498197d43b","sha512":"779ff0c5c21d8faac36ec4d7d3dea34c8d74c32b41fa15612907f95dcf0db800b3d1ac26ce90b97a09b4e347e948817fac9dff44bf39c87b2552bc2964e8cc98","ssdeep":"96:s/ZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:4ZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"12d1b5bf3d666815a632c0a49f928c04d13190175b0c8c79bbfd19e8cfcea89766f764","size":6571,"data":"","first_seen":"2026-02-04T16:46:53.785273Z","last_seen":"2026-05-31T17:09:56.316243Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e1b9a5f8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0c3f1e3d66becdbf876d67407987f2dc","sha1":"b6efd3fb79b3e5146f2b59a995d20aa0b8784781","sha256":"b66e09020f350c9823f77bf751c7baba3919c405a5136ec51f11feb7b18f2422","sha512":"c98d93e492cd661f7d762c6a5aa78a9d825caed0d31431dc6017046e0f58131f6ba749a9a484b34e839df79d4bc41313627bcc56c0fa74fd6ef77a1aa24a7e98","ssdeep":"","tlshash":"1f510dd1ffa8a26ab70bc1bd145ad910e333f00540295f7f7bca12f14f5d684241eaa4","size":2994,"data":"","first_seen":"2026-02-04T16:46:53.82164Z","last_seen":"2026-05-31T17:09:56.234828Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fe82323f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"669e102e9270a19254b328309b7bd79b","sha1":"9065048ce1d9bd81c1f14b5b3ee823b1a67ee7e9","sha256":"3943b950c4e04f14f4a73d99c9dcbad0cc9b95a53af9cad067ca307f23c67a84","sha512":"dc1c963969f4c12f7985c870f95e517dd34d8a240a7e571c3c48ae2a897fcedde8b19edc58ba8f8d287c430c23563d0b13adc8bfbab046bfd8d0aa0534c17b98","ssdeep":"","tlshash":"6821a5ca277acaf089614075cf25300132376003932fda85b6de79b48f0c1c5866a7be","size":1427,"data":"","first_seen":"2026-02-04T16:46:53.831665Z","last_seen":"2026-05-31T17:09:56.217679Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","size":69,"data":"","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-07-24T05:38:46.703124Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-9a611939.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"05124a4ad1f6f96c91241ebb8e7d16c7","sha1":"ead685e0674074a629d424ef75160625add44a4e","sha256":"be113779abcdc0cb0a1e1d1869dcbf25389766b7542af7026def949748c6b2c5","sha512":"d223f39fe2f71099a7508aab4bde8b18a50962bd84d786e020ff94d2f78e12d5173277ca697d8f67dbb8ff87d4424b1a92251198a255e3d9d6ffcd1f03accb0b","ssdeep":"96:v8z1IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:gyaa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"2eb1a7e17190fcb7d739dacd406041e097ae57e07029c5deb16f9e03250acf866eaa49","size":5151,"data":"","first_seen":"2026-02-04T16:46:53.814164Z","last_seen":"2026-05-31T17:09:56.228163Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e49b3847.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d0c0db380a45c9e6d064f13680d8a6a4","sha1":"59923bc02b8b720b31e7add2c4065dcfcc4bb9ed","sha256":"c0477de54e30e97c8ce95f96b922ed1c7b198efa117df59c9a91e3cafedbfd9c","sha512":"1645ae0cee632dd55d1365ee39c8e4430d284ea1c9e37f7c2f9c941d8957e0c538f1f18223aabe50360d59d34ede5f9d9718fe66a8b819f60dd15e18834e1201","ssdeep":"","tlshash":"1d21878417fb729475576188463c4b02d2324053aa1ccf3db3ad76e88f8c1c988bb725","size":1270,"data":"","first_seen":"2026-02-04T16:46:53.815492Z","last_seen":"2026-05-31T17:09:56.231941Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fc1e2a83.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5155e218447fc2d7beac06ad6a479706","sha1":"e58174fa5fc19c1bf2c757f5b8da080e3eda0cb9","sha256":"8b685c46e78f528a933e569a64946bfb2856c894c7b70e000875baea0d1f6df2","sha512":"3960e51cbb3c1daedf5e60abe3acec06983fc7ece0f568c9d8d68b264693625a2f0a8e691550f22f2606684cf7cb650aafdc0781578e7ef6000668231fef57bd","ssdeep":"","tlshash":"1b81d95252bb91786861d1e10fdf16842216843b5a18c479baca61f08fc72fc9838bb1","size":3883,"data":"","first_seen":"2026-02-04T16:46:53.806758Z","last_seen":"2026-05-31T17:09:56.264824Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-39a44663.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9c4095365d93ce99d59a0bbcfb3571af","sha1":"b2027d2c10d0d6869941bdf15408ec5205da8a5e","sha256":"6fb8abd2e0f29cef2c80e3c88744a5ef247b524fa717637f281eea31367165cc","sha512":"89ef5965c4910b6862b3f2229173b5e927d74ea4c65390e830d7fe8b039b7dfc15fdfbae6c3c2a63a5892935ac3911ff579812086818732980fecbbc3d75be03","ssdeep":"192:/BhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:/0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"2572b7ac3693bb28a9875bec26f55150f6343812442ed5bdb6dcc3e28f16a844cb2371","size":17121,"data":"","first_seen":"2026-02-04T16:46:53.890002Z","last_seen":"2026-05-31T17:09:56.279518Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99f627175d32deced3144853ae54119f","sha1":"b9c761a937e659864b4f04fbf3d132c8d5c72e98","sha256":"85765635423c64ae5bcad7124ca3f875207202eab7339219f772abb11944e1e1","sha512":"ca22ddbf642440e4f4ad9cf8446737931589848bb2d0acd04419299905cf6336a380389f0eb417a68e6f53c4c9bda61489bbf641448f26129d68ca92ae95d2d1","ssdeep":"96:mq9hafUCzCSDKCfhpq+hqqGtdMVZI3o5R3w3fo8C+Nqn0Si:d9hafUCzCSDKCfhpq+hqqGtd2ZI45RgT","tlshash":"a7913e67b0e3005845a37a644baf732c393b600b3a0adde47d5e1b609f57f625482bce","size":4453,"data":"","first_seen":"2025-11-24T21:16:20.877428Z","last_seen":"2026-05-31T17:09:56.37932Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e741169d.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5b62b9b407c529fc0da47e9ba1970838","sha1":"e8e33ef821c1a209d5faa67ecdf5ed44a2601102","sha256":"4bc5ad130c6753c244d1f84e333a73a401d6260e12850add9bc8ad3e4d5faa35","sha512":"525a807cf38aa58f8ae3f7b058fc3795e9f894e150aa2d00f898238e8a40e743dc49817960f46577de01d27f2afa8ee0cad992446fe79b5113acbf2528f0a6c5","ssdeep":"","tlshash":"d95177c5772b50b49103e0d40faacd400b2291179526cabfbdef71f58fae7496819332","size":3131,"data":"","first_seen":"2026-02-04T16:46:53.839579Z","last_seen":"2026-05-31T17:09:56.208641Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-78a86ef1.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"50cd392782cf95cf7cb2241a1bb90995","sha1":"58bdea94844886bddae27cdddff71f9528cc75b5","sha256":"018e47a4819aab611cb956fd684124010f61e4c98d01156fb9307d8ea02decb9","sha512":"8f445bf570ae98f8a4071ede97675bd4406efa1c185296b650db95267de02772a37b20c9dec0210a4f6381e86321faed9188a6a63b95381f820196ae6f246245","ssdeep":"96:eg2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:z2ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"5bc133d9bdbd2e7b3517c028e16e86a4e334a0279424df3e77ac61f88f99942181d931","size":5676,"data":"","first_seen":"2026-02-04T16:46:53.769588Z","last_seen":"2026-05-31T17:09:56.258671Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-3602d8eb.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"857dce2a56b95b8e123827a3639f7a14","sha1":"1ff9229ce23fce5904e92bba1d49164820bb3378","sha256":"69474e7d897d5e0b77fc6ee9b6a831426845c3aa517c9019c367f280b317c2b2","sha512":"9c82ee18c1c2308fc7bf47f83b99b801f339f10ffa8254c480d000f948065ff2f3cf8ba768778c6550fc44bf749a3f62cee73f3e800ef3abf275d68ad722bdae","ssdeep":"96:LLi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Xi0K9+N+DF5si6SJHG","tlshash":"c5d120d13e756e041523c939a7ae9d45d331a037cc3989be77cc91e08f9ea405aadb31","size":6313,"data":"","first_seen":"2026-02-04T16:46:53.840953Z","last_seen":"2026-05-31T17:09:56.191004Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-22248626.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f4535c3dfdc1c1cea5bb44b6730fffd3","sha1":"6da0c4926c4ce60ee0913504fe796301ea9c5fe8","sha256":"0fc3eab7dbe23c18070fd0c31600b8c46caa9ff7f41f535c83d0d0de72dd4af0","sha512":"d449b015d2467d3b3cf764933c7922baca9a8fef4e09192ca11b2e6047f6b63397530ec0da166c6504880523fb7e1f2be89a333ce3119225dbbe73376047e07e","ssdeep":"","tlshash":"9d5188d0bbf7797d25328025a46a98104326c007d378cbb9facd92f60f9964154e7377","size":3075,"data":"","first_seen":"2026-02-04T16:46:53.833025Z","last_seen":"2026-05-31T17:09:56.241615Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-b8f4bc3c.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6b68123ccfd4ec8c0e438da7086b7a1f","sha1":"c0e12d37824a9bfea426c0106014a2c8b4b45521","sha256":"0cb83030afb9ecdd4b13745d722793a85679ccf71430935af07cd15c62f21b7c","sha512":"66e8adb70cb32e1d579a6784f19c73b222a72356e0e6cd822c25d3bd87a1c71c6efefbf315e29392c3d61fa719c15248f5d529070fa35f47fa71d9c1c2d34a52","ssdeep":"768:TPYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:D+qIzcUWb67sHYbzyER","tlshash":"7523b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a319b1618edd6bcda","size":46047,"data":"","first_seen":"2026-02-04T16:46:53.764491Z","last_seen":"2026-05-31T17:09:56.317095Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhInfo-6eb82573.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","size":2776,"data":"","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-07-01T21:00:47.792187Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-8d97d39f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1a8256a5b1acc4ba17648b5138047595","sha1":"0f0ccbbdda839d3dea347f3419577415ad7066d4","sha256":"22e1c0792d38caee2d95d42830119d425014356177e30b2100fcb05cb2db5d88","sha512":"68bbc74532ffe0f3c9fb073e7257c90edaae84ec372f7e925d382f6c9b7ee5a5fba282973d8bc03e9cd27ee327c8ef83ca94df76471bacd226c068eb33d0d98b","ssdeep":"192:iDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:iDEIRRuUCL5dmVp","tlshash":"5ee1b601b929ae3cf73b84582406529161d09f59e630c2f6f3bc9b2266d5bf22f5db04","size":6947,"data":"","first_seen":"2026-02-04T16:46:53.812836Z","last_seen":"2026-05-31T17:09:56.248467Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/index.html#/Home","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-07-24T06:51:16.197268Z","times_seen":6938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-bc8c8fdc.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5062afef6ca30ae3b81acfdbd0a60979","sha1":"9977f463a922b994dfa091f10666cf45ec2224c7","sha256":"b03c93c30f2003764dafafd83df6d0aa83bed9f5609d8d0a3af3db3da80f90c9","sha512":"fc2216e68d6dbc4affaa01076ca3ebf30198b3dbf7f1bf500bd7766fe63539376e307959661127c4092009b4e0145b305d95352688ddc71edbd7520426572a72","ssdeep":"","tlshash":"c551a7d7b33a12763851d2945eae5ee05222e01ba11dde3ebbce61e84f461851c36632","size":3023,"data":"","first_seen":"2026-02-04T16:46:53.783617Z","last_seen":"2026-05-31T17:09:56.192135Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/w3m-modal-a765f42e.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0df863094f3b0bc7e0aaf07ad50f8713","sha1":"5ab7e58bf80229212abafab63a7cd97d8be6f267","sha256":"888071f2384a181ee67fa2822645407e7cd5a1ff53892c77b9915522d0094808","sha512":"f9b68939b77369fff7d07461e333bd086e463fd5399110f6f4b0060c99e726c57712033e4c690f0b7c635192bb4e0eb84f8bbc297ed771d37f46725badc8e797","ssdeep":"768:DWEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:wCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"6d2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec52d58fd498869bf735","size":46159,"data":"","first_seen":"2026-02-04T16:46:53.879627Z","last_seen":"2026-05-31T17:09:56.231128Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","size":1955,"data":"","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-07-01T21:00:47.72394Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/VerticalTickers-27d43059.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2687eabedc7fc188220cf3e6c07e9fb5","sha1":"2dea3b1a92a4d4347e3056712c24a155ec9a4339","sha256":"b930374e092c6a5e7ea35a5d7e3051a48e29248638c7d342f2c920624cd915d9","sha512":"ccfa8fc5d41e3b29a40d1400eabac15f8ab84a48423485960ac0563a3a95d66d44bb3947c88a5fd7d0adcccdb053bc1138bc01f039ef8285d3a6bcd26f0015c2","ssdeep":"384:iy589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:T+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"a3a2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb55d25f7fa9","size":23018,"data":"","first_seen":"2026-02-04T16:46:53.834941Z","last_seen":"2026-05-31T17:09:56.31322Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/purify.es-ee0e7e34.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","size":21919,"data":"","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-07-24T05:40:16.112458Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/ExchangeController-95d3f0e9.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6de440692a47dca51bde7e3a191f21ac","sha1":"a7fbe00656304c3ec11b8143e94d5cf0b108fd0a","sha256":"0ac6e5ff4b3c6fccd14e0c797985646c0e55179998d2a528e3a475b92dc6147e","sha512":"784d6736d9ebdff0a4ea9d1f15dbfd0312524925a898d8a5e5f4ae21086fc1ff17ca13d91fe4e45575fa25c3b8170f5e9ca8ba90d6d68f56233e09bdaf0616e5","ssdeep":"96:RvuMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvuM1gE2k+1ei+NFnopzo2Vvh","tlshash":"44a19600b0f2703296d929a025752520cb6d4fe9b467c5d5dbec0ea66980eabca3ce34","size":4729,"data":"","first_seen":"2026-02-04T16:46:53.777846Z","last_seen":"2026-05-31T17:09:56.220379Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"krakexn6.vip/index.html","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://krakexn6.vip/","date":"2026-02-18T13:18:31.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oPi8Bc7peRe5zWWeG7BPbYjPCXMe2M3XxeNNTLen1makhHuras4LH17jeMrEcUy%2B0yPSFQbCo4zURxFGVWU%2FDKbbVKRWpB%2BeixF5ew%3D%3D\"}]}\r\ncf-ray: 9cfdcf993f40a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2364,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2364), with no line terminators","md5":"fc3b78b3fb9ec2e09a061b1566bd2b86","sha1":"0b6d5029476a9956beaf4e18aff4d8e9dd24638d","sha256":"0c25d38c18c946744ebd1c5fa986c41471e4857cf801543fee30836b3fa33d6a","sha512":"ba20af8fda6dd72ecd48387e78ca87dd121a0b7e28afa5d385eaa5cfc9aa0bf6c8189c8a4fcc8df353b9c01ca90e9061ba88f8d780b7ae69bb40f9820b01feab","ssdeep":"","tlshash":"694123539442261af0238eb992f9b924c57cd426d6921f99706179b8c7c2fd681e331b","first_seen":"2026-02-04T16:46:53.915719Z","last_seen":"2026-05-31T17:09:56.342739Z","times_seen":15,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fb848e84.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:32.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-fb848e84.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-30df23\"\r\nexpires: Thu, 19 Feb 2026 01:00:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1077\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvEsOiazg50DhUCQ%2B1uaFm23QAd6VSRRgVOakNQT4LOGRF%2Fkzrny74k1a6rvgWLjW5TRygEbsf6C%2BDwNzmxMY6k1aIgZdYQH2KxmAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcf9a1f62a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3202851,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"96417e46f4c2c9bf00988534a5c4a590","sha1":"2d4c92921613c9d0a44f7c483a12ce0aac5d356f","sha256":"97eb4cf2f363bb3e0e20164b88c1ac7705e0809bbb01e1f485d8caa663cae2c4","sha512":"a1db68789869bd90ec00601df68ddb895bd66b64fe62bd531f07f4a2ee8e08b3ebd605f3f5e9d1da587887709d450ab08050b818074e37fe71786e2b0fbbce07","ssdeep":"24576:KL3j5T12VPH+H3woZRN9lo/PDXgRw0ERirdxQR1lc5Z6Uzx8N1:KL3j5T12IH3wo59lo/PDXgRw0ERirdxK","tlshash":"74458e5876cd24ae07638549f0ca2605f1bc0cf6f59bc16069fc896e21f6c59d3aeb38","first_seen":"2026-02-18T13:19:03.95618Z","last_seen":"2026-02-18T13:19:03.95618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/css/index-a167d81f.css","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:32.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/css/index-a167d81f.css HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: \"697bc72e-5008e\"\r\nexpires: Thu, 19 Feb 2026 01:00:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1077\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yThy0GRgYs7bk4OaFPjPsFVwL2nu3wsayYtBE8SpK0sq8TCRqTKs2hbr9OaJ%2FUH%2BUIGfV8aIIhMRG8OOs8S1t0u3TG1go%2BZKy66xIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcf9a2f63a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327822,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3c0f232f3cd0c3621ee9d6ebfadc7020","sha1":"1c4514e38b69bbc54145a692445bc833fe44f1dd","sha256":"b3185e280b9eb2b5dee6da2e1f0d79c156b2459b106fc66507a3a352b5e670c1","sha512":"245cd6591b0cd714fe69e96e71faa61b55a5b9a9514382a10aa531779a4721d81dec875d27c84ac7e60e56430eb8b529a7511f2a3ff47e431c27fdb019d8aaee","ssdeep":"1536:OFsJM2FDrx3WqyrtpqoSWEDZsIIUuZM3ir/j3Ykrx3WqyrtpqoSWEDZtKCE0Zz1V:O0DrxmNH9yD8rxmNH9yD+Gfj0+","tlshash":"a964c36aa690527cbf17f9a497ce96d8f23ce5b2dd01dae8f10051188fc3bf50663606","first_seen":"2026-02-18T13:19:03.957016Z","last_seen":"2026-02-18T13:19:03.957016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-78a86ef1.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-78a86ef1.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-162c\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2fpZqwCi9JEqy8JJJmeAbq%2BygW05%2F5ElztYT2hNR51iAoDZUSMdAMc3oVJ1OUAEgPqsABBCR5Ay8ahaoePBRcPBgQVkQACEHG1vFAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa41913a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"50cd392782cf95cf7cb2241a1bb90995","sha1":"58bdea94844886bddae27cdddff71f9528cc75b5","sha256":"018e47a4819aab611cb956fd684124010f61e4c98d01156fb9307d8ea02decb9","sha512":"8f445bf570ae98f8a4071ede97675bd4406efa1c185296b650db95267de02772a37b20c9dec0210a4f6381e86321faed9188a6a63b95381f820196ae6f246245","ssdeep":"96:eg2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:z2ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"5bc133d9bdbd2e7b3517c028e16e86a4e334a0279424df3e77ac61f88f99942181d931","first_seen":"2026-02-04T16:46:53.769588Z","last_seen":"2026-05-31T17:09:56.258671Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e1f7db2a.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e1f7db2a.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-814c\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qx5L57QP3P4k519T3k7PdCzfbHkshdnfRZ9VyqRO41RamXvtTUUbICISaJwYppg%2FEijqiyGrTYe8X1pfz4hMNSDCzTPVJZj2rls3oA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f9a1a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"1a1219d53a3a4b710eaf1c87840337bd","sha1":"d09d5123379f46bf1681039eea03d6965b3a7f3f","sha256":"b9d3e7f5b216275240b008eada5d7ea3e0965ff73888bd7db184aabf4abd5533","sha512":"3e570fc42cd8c4a2ba58460cc3cf0e8003ceb7d3ea3cb5f4cd483275cb3c7dc1a61edeab5d10e85186546a0d4fb0e941816d3bc13b88682dc2537f5142a62301","ssdeep":"768:OOzlkEh6WjzDJ/NCYUH6Xi5QMR+gXPLjNHA7DGlM4+DBL+FUytQLUeD:Dzl5h6kwHiipRFTjNHA3GlL+lKFDCp","tlshash":"fae2f8c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-02-04T16:46:53.770496Z","last_seen":"2026-05-31T17:09:56.314919Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Light.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2933\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\nlast-modified: Wed, 13 Aug 2025 13:41:57 GMT\r\netag: W/\"c8b441e434443e5317dbd52ced7d2e6c\"\r\ncontent-encoding: br\r\ncf-ray: 9cfdcfa7890848d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60472,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60472, version 0.0","md5":"c8b441e434443e5317dbd52ced7d2e6c","sha1":"8b6f5b0e3d541db54c76c47c931195ceb9026d6e","sha256":"88a2ae5e48febe008bb609679f0aed5928f67812ea621baf377d457fd589ad96","sha512":"0561615f9ee8e935c10b44a10e0a0ea1924920e85da08517753bcf6e79727e5e6220ffcf596ed0a2a98b54dce5aec96a4fd264cfb41919710e4becf24270da3a","ssdeep":"1536:0VyKJVaNbn9d4u3jnVnbFdKs0UggxNSlIyq:0VrQ5ImNH0YgIyq","tlshash":"494301603958ccc8bc96eaf95b2da37d393e322941661401cc8dfdc296a71d7dd4a24d","first_seen":"2025-09-26T22:05:13.226599Z","last_seen":"2026-07-24T06:52:07.911204Z","times_seen":642,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":103,"dns":0,"connect":13,"send":0,"wait":27,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/css/index-c074926d.css","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/css/index-c074926d.css HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: \"697bc72e-876\"\r\nexpires: Wed, 18 Feb 2026 15:00:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 37064\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXEIryneNGm7niPZ4cBa3O%2Fd%2FTqeFwbsKYLK84YBV7tXD%2BO7aSHif6p00eNGdIWHcz8h8cogLpLj1HeGB4aF1R3XlU63dKW8pOGR2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa238b1a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2165)","md5":"24fcaa8d1efba01db124557375dc628a","sha1":"323606a4765566ff4891b9fc0107607f387b266b","sha256":"c074926db6a49f8c4dd30fa9a9101326e20a337c8aaeaa0203be8d5673ee1e55","sha512":"0cb578a5fe13704683a3d987520f9031e4df2459c38b313dce492fdb3f0686df4896168d1463566032864e56c9ffc20e10e1d6f478d9fc7b64134db34afeb937","ssdeep":"","tlshash":"79417d3be8906637d823b51497d916c4913cf1727da049e971283918cbabbf4031b30b","first_seen":"2024-08-20T09:17:43.593605Z","last_seen":"2026-07-24T05:40:16.12059Z","times_seen":52,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/send-7c4c9d57.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/send-7c4c9d57.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-8337\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRS2EjYLyAEvC5ZggpTNAwMd05Wu0UzJGB9kGilKPs1GVvw5aPloXaiZjVH6jP%2FOJpmra4hkTdlag9WiAX4lp%2BewJAY7mp178etsbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4d958a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"7489b16b42f267c218ef7cfbab4684ad","sha1":"46e987ab1c1b6a59847022905fc0831bb3fdd98f","sha256":"5ab061ee31053f1daf73935b97a6583bd34e955555f06be45d9bd54c359decb1","sha512":"ce52ea00199b76f0fe058a57cb853647dd545e1cae7a58c3e7be5c2c8b50910475b467e2615c5447381a0ad0f3661cabc2088ba2260399c64bf3aa861d4ee009","ssdeep":"768:haYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:kYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"29e2e89433fa281d19a7516dead69e006331501bc11cc5fdfaeca2f18fa9a4249fb734","first_seen":"2026-02-04T16:46:53.768699Z","last_seen":"2026-05-31T17:09:56.22894Z","times_seen":15,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-22248626.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-22248626.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c03\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dd2xYG12xink8jx48v0tRmjcsnmcLaTQ8od0EWHAKkqnFa9yw6oRc%2FhGw1tF4v41GBrCZAftOZGA0j3jDCWwumoVfTlej7mWBLF4yQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5e993a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"f4535c3dfdc1c1cea5bb44b6730fffd3","sha1":"6da0c4926c4ce60ee0913504fe796301ea9c5fe8","sha256":"0fc3eab7dbe23c18070fd0c31600b8c46caa9ff7f41f535c83d0d0de72dd4af0","sha512":"d449b015d2467d3b3cf764933c7922baca9a8fef4e09192ca11b2e6047f6b63397530ec0da166c6504880523fb7e1f2be89a333ce3119225dbbe73376047e07e","ssdeep":"","tlshash":"9d5188d0bbf7797d25328025a46a98104326c007d378cbb9facd92f60f9964154e7377","first_seen":"2026-02-04T16:46:53.833025Z","last_seen":"2026-05-31T17:09:56.241615Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhInfo-6eb82573.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-ad8\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEZsGRSUAmq2Ox%2FU8xAJgQXXCi4YnLYgKWuNH6QKKo4uvNG5SbX7cR%2BGVifPZojgofaeIWB9%2FUbYgoKqp1HQZdZvBf8CXTezDxgC6g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfab1a5ba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-07-01T21:00:47.792187Z","times_seen":28,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/css/home-63fcf511.css","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/css/home-63fcf511.css HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: \"697bc72e-51ae\"\r\nexpires: Wed, 18 Feb 2026 15:00:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 37064\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nhqIuSesCqw8bSwv3v6LiXHzBoZQ%2Bbvcn1r%2FAbMw7fUQ28t4J3SdWua07hxksawWJqUAfk3cZ1PwOBMrHace%2FBQ%2BypIFfPNQFg5lA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa248baa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20910,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20909)","md5":"e1a77679fd99e12512a35232dbf92aa6","sha1":"77441572a20128abe7782df6c3b89838eebf6789","sha256":"63fcf51164f4fa3b19d1522f6188ce6457ee8cfd82b92cc35c8d58eee9b6e6b8","sha512":"54286dd64ed38c4589bd5550b00b5484552b25d4a38a4e81cfd740abdd179b257888b58932c761a63dedcae7192e97c9f5ca7306085e92404a310dc5f7fc5d5c","ssdeep":"192:qkMJJ0w3boMvGOYRiwvkYrIonYSL2U93/tG8lUQ+iNCZp:q7ByiwvkYEonYifv08y4NW","tlshash":"0892317b220a331ce137de505be91254a328d533e21226fd5465792acfcbbc222f675b","first_seen":"2026-02-04T16:46:53.772916Z","last_seen":"2026-05-31T17:09:56.256005Z","times_seen":15,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2190\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa98f5ab28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22905\r\ncache-control: public, max-age=31536000\r\netag: \"cfPi3Q2pR9-1VkL9hnF0Qjwt9_fmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=6+7 c=4+2 v=2026.2.8 l=2190 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06ec24d6d0f8cc15531022c1d2d10ed5","sha1":"a35dfc22eac4a148d164ba1c0c0a30622d996cd4","sha256":"c17fc5b943b9ef6f7b6ddd64e34efbe217a7328513c76dbf33aed86c0019793a","sha512":"47054745bf01743c5756f0cb8a021dca767c880bbe1ec98a44d6819d6395d991dd88def918500862b763955f09ff0b31a7e8876e4178fd2b0aaaf7711df24557","ssdeep":"","tlshash":"eb412940ad424ea8e6031af82fac34a8555a0d6f64478c0d8029f336325fdd2bac4f6a","first_seen":"2025-03-04T08:48:45.474684Z","last_seen":"2026-07-24T04:20:43.720553Z","times_seen":465,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhX-3214edf4.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-9c2\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JqdX8SKz3UZK9rn1%2BWJ3Lq3EkbwExX74GlPpTcbq5I2b4hqDsAdj8D%2B0iSEQLQS8YfBx5wtco0KAdM%2FPnTLDkcCwni8TJfDAnNGtQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfaada50a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-07-01T21:00:47.813552Z","times_seen":28,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 1076\r\ncf-cache-status: HIT\r\netag: W/\"697bc72e-45\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lfr9%2Bv1XPjz2VHHYDySqVeninwbtRWVjOOGpqejRzoZG9NVFT0fowLUV99TkWsamCTQc6g6ovBVp7j6zdIbjAPIdNbUvuMM0Pcstkw%3D%3D\"}]}\r\ncf-ray: 9cfdcfa4a948a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-07-24T05:38:46.703124Z","times_seen":112,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/if-defined-49fb0c54.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/if-defined-49fb0c54.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/receive-316eb367.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 1076\r\ncf-cache-status: HIT\r\netag: W/\"697bc72e-a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4o6ojLTozdmbnpUH%2BfGdNf31kkjPA2iDUBqsNAzmnwKAMO35VC7O4Zbwc7oz9KitWpvRc6FvYYUylXbnsuPBDlzRiWUeevkiUznrbw%3D%3D\"}]}\r\ncf-ray: 9cfdcfa5d980a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7d621361c3cf5a5b3789e2660e55c8b6","sha1":"74b0e2b729580256ee560741bae5a18179dfabba","sha256":"2a7e9b535a681936d31c928126b80f9bf4ff8bd4d5b2884d585f225f9e8a27b7","sha512":"c914b923e869176389e5b1f12fd9346c12b732f8ae39cb4e8a404d518d259bcaf244cc68748b789a03d562c7279708ec257d015f56f19ffb3eeb385aa72cdae4","ssdeep":"","tlshash":"96c08c23a83842f308ca438ee824dc4a5010326eab224282f028235648721805aadc06","first_seen":"2026-02-04T16:46:53.781255Z","last_seen":"2026-05-31T17:09:56.225633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-78a86ef1.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-78a86ef1.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-162c\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sg%2Bba8sgRkiQwnFgpYRBcw4gm%2Bb2i%2BcPhROXSjtS0vsdL22ZJUR5gQ4HN37eIsOvJYCjl7zWGoz0pqneReM0rV7mNgGFx6sogp7lNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5d984a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5676,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (649)","md5":"50cd392782cf95cf7cb2241a1bb90995","sha1":"58bdea94844886bddae27cdddff71f9528cc75b5","sha256":"018e47a4819aab611cb956fd684124010f61e4c98d01156fb9307d8ea02decb9","sha512":"8f445bf570ae98f8a4071ede97675bd4406efa1c185296b650db95267de02772a37b20c9dec0210a4f6381e86321faed9188a6a63b95381f820196ae6f246245","ssdeep":"96:eg2ere/ioSNJrWM+qyWQRlFohVmwFgQbYmP02kW5SAZBAWk0j2l+v:z2ere/ioSTWM+qXQRlF0iQbYmsy5SKAE","tlshash":"5bc133d9bdbd2e7b3517c028e16e86a4e334a0279424df3e77ac61f88f99942181d931","first_seen":"2026-02-04T16:46:53.769588Z","last_seen":"2026-05-31T17:09:56.258671Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-056337cb.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-056337cb.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1046\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppOqi0ZVaFF0hFYmkm7R92WDslFpoCyj7rNgJp84mNwjE%2B4NJbdoEKN8wzSjW3V4WThZmSZOymQBRs8u3AMBQIdUoGLYlV%2FXyWuLUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f996a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"dcdf667bc73ddc52e95112b8a856e804","sha1":"74165988f75004fcd5581e9259b72f88f5e943d4","sha256":"93bf6f78236afbe56c381a61c6fc23330c35bae5308c8c490c812b9be64c5554","sha512":"decb014c9753b0afbef4b5d399f17fde03e42dee75eb46e17362cc3a4bfb8bcd972dca0b35bd8765faf77164472faace278ab2a4b2b82a9deba5e42acd93b3ee","ssdeep":"48:qLAhhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:oACgEQM0o8hJwisSPjgZDIKL","tlshash":"278125c57fb825e53713c060aa9e4c25e331a023a8299f2e7a9db0f88f55643781d373","first_seen":"2026-02-04T16:46:53.782128Z","last_seen":"2026-05-31T17:09:56.236223Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42188\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2933\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"a918aa94460a2a95ccfffcf7224df6e4\"\r\nlast-modified: Wed, 13 Aug 2025 15:27:31 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9cfdcfa778d548d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-07-24T06:52:07.982763Z","times_seen":680,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":100,"dns":1,"connect":8,"send":0,"wait":24,"receive":1,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35836\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2933\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"d9f04a87559c7cb8fd4dc85e16f292c6\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9cfdcfa778cf48d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-07-24T06:52:07.976044Z","times_seen":677,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":94,"dns":1,"connect":9,"send":0,"wait":20,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1264\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa98f76b28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 56092\r\ncache-control: public, max-age=31536000\r\netag: \"cfNST3q60e3DEaxemhB1mMC8dRfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=10+4 c=0+4 v=2026.2.8 l=1264 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a59ccce4090b66e6adfe363df40ac9f0","sha1":"d02fe751dafb8202db62931f44cf1e7673c7b430","sha256":"f374fd161e2abe943efdd445069ac1ff036e3317e9fb9d89ea0359a6d0584d52","sha512":"d93353fb79572007a6819315626193551a6f458d820647167b459ee324c32da3564473b25bc0ac9044860474f6eaf68e066809628376d0269e2cb446fd87ccfb","ssdeep":"","tlshash":"2921b7daf0b8e204840f1a2a4d66bc6b762f2d307f626a85395daff2424041e35d82b4","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-07-24T04:20:43.632064Z","times_seen":576,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-9a611939.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-9a611939.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-141f\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76YlJxtPkcKy9thABXOyJSEVbnfuM7cxzigaLjgr9M8lNG8bhKRlu1D8m%2BkWLZ3KEMbayObPSjc9UCgK6XcaBmpNP%2BH1ty1n3D37ZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa2e8dfa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"05124a4ad1f6f96c91241ebb8e7d16c7","sha1":"ead685e0674074a629d424ef75160625add44a4e","sha256":"be113779abcdc0cb0a1e1d1869dcbf25389766b7542af7026def949748c6b2c5","sha512":"d223f39fe2f71099a7508aab4bde8b18a50962bd84d786e020ff94d2f78e12d5173277ca697d8f67dbb8ff87d4424b1a92251198a255e3d9d6ffcd1f03accb0b","ssdeep":"96:v8z1IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:gyaa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"2eb1a7e17190fcb7d739dacd406041e097ae57e07029c5deb16f9e03250acf866eaa49","first_seen":"2026-02-04T16:46:53.814164Z","last_seen":"2026-05-31T17:09:56.228163Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/favicon.ico","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/","date":"2026-02-18T13:18:31.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:32 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sq49ZXrrp3mOrlGHx0pvSn%2FFcCAVwiWiEWUpDEpqNv4AOzUByVq6mGfagkx4sWtTIhDZVJXcQxDHAf65zLBzaZqLz%2FUdnbTZhrtHMg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cfdcf993f3ea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-07-24T07:50:19.904838Z","times_seen":543326,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fc1e2a83.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-fc1e2a83.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-f2b\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoBW4eMncZEWyBSd6xaVQYRd%2FvnSSzs6w0DVcRJ9%2BQq00OnFqVq35X0%2Fm6i231wJuqt5XDWE%2F01sPz1LaPCHN7FlWLFJoWuDlVpE1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa48940a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"5155e218447fc2d7beac06ad6a479706","sha1":"e58174fa5fc19c1bf2c757f5b8da080e3eda0cb9","sha256":"8b685c46e78f528a933e569a64946bfb2856c894c7b70e000875baea0d1f6df2","sha512":"3960e51cbb3c1daedf5e60abe3acec06983fc7ece0f568c9d8d68b264693625a2f0a8e691550f22f2606684cf7cb650aafdc0781578e7ef6000668231fef57bd","ssdeep":"","tlshash":"1b81d95252bb91786861d1e10fdf16842216843b5a18c479baca61f08fc72fc9838bb1","first_seen":"2026-02-04T16:46:53.806758Z","last_seen":"2026-05-31T17:09:56.264824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/receive-316eb367.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/receive-316eb367.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-19dd\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tz0lrtikkrmklITCZ6uoeY8sS5AdVUzp4B%2F9rtfVk%2FB5n0FtLrmtAj8i1VJRuFDBWgp8daeTB6Xglz5oj%2BLJiPNUFnYg1KHiL08Gow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4692ba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"46b7be9a4e75fe3e4fc12e8ae4fb9f79","sha1":"659d02ced628ba643801d574f231b35f47aa5ea1","sha256":"a041868e1060bf435465819b626e55df7edc54b8e9d6418c0aedbbaee7d51e3a","sha512":"9cf37e1b61ca0893c44ff732164606acf71ef6f984d4ad88822a0017fb1002672ced2f1f48f0c063b129947c30c05c5fb2985201bd1360ec69e5c26130c51334","ssdeep":"192:sIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:sd23vx30IXuTjmpqAY4c","tlshash":"4dd1d65659f638adb803d0981e969a00c131404f9539c5fdfafc83e5cfe968689ef722","first_seen":"2026-02-04T16:46:53.886927Z","last_seen":"2026-05-31T17:09:56.229632Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/ExchangeController-95d3f0e9.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/ExchangeController-95d3f0e9.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1279\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0NZrRMCfBWY0oMis8T4pOXnMiFKjWHbynhKZVWhVMaoXdjEuBwKgDNuaOzdtL5BzCbPaegsQXvzSbs7DWhT%2FW%2FJzk9yXO05EEN35Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa47939a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"6de440692a47dca51bde7e3a191f21ac","sha1":"a7fbe00656304c3ec11b8143e94d5cf0b108fd0a","sha256":"0ac6e5ff4b3c6fccd14e0c797985646c0e55179998d2a528e3a475b92dc6147e","sha512":"784d6736d9ebdff0a4ea9d1f15dbfd0312524925a898d8a5e5f4ae21086fc1ff17ca13d91fe4e45575fa25c3b8170f5e9ca8ba90d6d68f56233e09bdaf0616e5","ssdeep":"96:RvuMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvuM1gE2k+1ei+NFnopzo2Vvh","tlshash":"44a19600b0f2703296d929a025752520cb6d4fe9b467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-02-04T16:46:53.777846Z","last_seen":"2026-05-31T17:09:56.220379Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-2886c057.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-2886c057.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/receive-316eb367.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-7477\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rj32Wb6SQyV%2B6wQZjKw8hUOgNM6I7sg8H075fpYUILbk7%2BeUJ2M%2FIcbKrRPM4kHJLRkggW0n6rDlrPX%2BY6AaQ4oc6P2XKFMnfeF%2BhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5d983a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"4ca9002140204d97de00ebe56e01e19b","sha1":"456642a96418b326d0f6771d2e42b3ce334eb6dd","sha256":"716bc7005c8ff7f6fbb9110b1e069f351d35b425d53a25a7184a62f22dd2b2b2","sha512":"a46935cbb735226279523607023570d03eb72249792469f763f5faf086adf9ad45e91f2be3fcfd84065898c2417413affa2b9b648e5cdb8627476b65a963a725","ssdeep":"768:3nfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:K6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884a8fb4da8d37f79e6a94bbf2c","first_seen":"2026-02-04T16:46:53.851732Z","last_seen":"2026-05-31T17:09:56.20372Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-3e85285e.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-3e85285e.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-628\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BpLncBPi1AdB4eUffolEai8Y36bdn15Hm6KXXNj5NJVA7kAxnIew1t2c%2BkVKeKpoL86%2FuFARvmjKdit7PB3g3pWOBUDb3wTDjGvtkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f995a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"2f8c56a2cb3b200fe8b27f3d79ae2328","sha1":"904db870c3c853c0d13c8865bd2c6e01ec0d309b","sha256":"8821da40ffdc0c60adb14f1499e72e0cbdd7c69658bec283d256161651e6fd77","sha512":"9342bc44af0810b2b9d51299809fbf87993c4501e3c3f088dd9c14511583728da5f52a2f19b0e55377a9c48475f0b4be94efb05161c509346ab4128b83faf9de","ssdeep":"","tlshash":"f2317389637a24a824a3d0e50269da601235642aa21fca6cf2fe71f58fad4c4653b712","first_seen":"2026-02-04T16:46:53.881136Z","last_seen":"2026-05-31T17:09:56.215779Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-5ba2403b.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-5ba2403b.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-104d\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AY5jrUeGo2N3Wez9hQeegRJlNM8aBAXR1CAFfoOzbbGCGmtyig8pLmpMdqdbdUsQ8LvkXYAaiBq7oLeO356VwMxtPykMzpxCQuEl2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa609a6a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"af6fbe24712cde764ac18f0390ce5a36","sha1":"42da477ef31a7c14b9553b29e5ab01d1df320f16","sha256":"d275eb8d9bd36fcdf07ae50de4c32b0e958b4225922ceb8a570d683b1dde8562","sha512":"2f72bf1c2072a4c0a961c5761902f0975891f4967cea7304db4262903aebd6814d5f7c96fcecfd13b3fa6a1b39ee7a81240f24e24154d8305e79bce511702021","ssdeep":"96:cp5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"7e81b868b37d217979c390588d366d01d335401ad11ec9a07bdca0e78f9a2ca9db7772","first_seen":"2026-02-04T16:46:53.794723Z","last_seen":"2026-05-31T17:09:56.227414Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhCheck-1cb2a956.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-83e\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IP1hNhX5UGrzNoLcAyni%2FSp9Lge79ZpB6bLNieIGtkrrgCmJLWtPYOpDuUKMTyIcS1I5TZqEYX8mA77F2%2FQuphkwBIpKc%2F4Z2b61Xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfab2a5da106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-07-01T21:00:47.745625Z","times_seen":28,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-056337cb.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-056337cb.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1046\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ZAkYpURVxhiP00bmTXlFU0nt3gnE%2B2mLkblH4BliU5GQxFuB3%2FkbhDnhOqGJAZURWoW0N07DHcepH97ThAUaVqtC7a%2B7%2BXIM1ubSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4b954a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (578)","md5":"dcdf667bc73ddc52e95112b8a856e804","sha1":"74165988f75004fcd5581e9259b72f88f5e943d4","sha256":"93bf6f78236afbe56c381a61c6fc23330c35bae5308c8c490c812b9be64c5554","sha512":"decb014c9753b0afbef4b5d399f17fde03e42dee75eb46e17362cc3a4bfb8bcd972dca0b35bd8765faf77164472faace278ab2a4b2b82a9deba5e42acd93b3ee","ssdeep":"48:qLAhhYZ9buEQM7ooRKhJwi7QSDzP6SgZr+KK3ZoZzEPu7:oACgEQM0o8hJwisSPjgZDIKL","tlshash":"278125c57fb825e53713c060aa9e4c25e331a023a8299f2e7a9db0f88f55643781d373","first_seen":"2026-02-04T16:46:53.782128Z","last_seen":"2026-05-31T17:09:56.236223Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fc1e2a83.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-fc1e2a83.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-f2b\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D3jr9M7RtSyY%2FFwH1nsNJXPubIoKZBBhJ%2B7l8UENTsdzAnoOE9j0scVMwqR59%2FarwU0GGWIxoav7umIyZD%2BbxDOPhEU48ekSbwRpsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa609a3a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3883,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"5155e218447fc2d7beac06ad6a479706","sha1":"e58174fa5fc19c1bf2c757f5b8da080e3eda0cb9","sha256":"8b685c46e78f528a933e569a64946bfb2856c894c7b70e000875baea0d1f6df2","sha512":"3960e51cbb3c1daedf5e60abe3acec06983fc7ece0f568c9d8d68b264693625a2f0a8e691550f22f2606684cf7cb650aafdc0781578e7ef6000668231fef57bd","ssdeep":"","tlshash":"1b81d95252bb91786861d1e10fdf16842216843b5a18c479baca61f08fc72fc9838bb1","first_seen":"2026-02-04T16:46:53.806758Z","last_seen":"2026-05-31T17:09:56.264824Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-b8f4bc3c.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-b8f4bc3c.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-b3df\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NAQCho7z9rynoeJvAAgkZuYq067LYzG00fFxeWU1gRjKohklCP11lE7OqqzIvsSS2XY6lE0NTl%2BOXZrFLEUsUGakp3Y5AIe7rTs1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa609aaa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"6b68123ccfd4ec8c0e438da7086b7a1f","sha1":"c0e12d37824a9bfea426c0106014a2c8b4b45521","sha256":"0cb83030afb9ecdd4b13745d722793a85679ccf71430935af07cd15c62f21b7c","sha512":"66e8adb70cb32e1d579a6784f19c73b222a72356e0e6cd822c25d3bd87a1c71c6efefbf315e29392c3d61fa719c15248f5d529070fa35f47fa71d9c1c2d34a52","ssdeep":"768:TPYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:D+qIzcUWb67sHYbzyER","tlshash":"7523b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a319b1618edd6bcda","first_seen":"2026-02-04T16:46:53.764491Z","last_seen":"2026-05-31T17:09:56.317095Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-cf3\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RY3qhQhVnanBPl%2FflneutInHLOURUq5sYFPJRqC7kVH3MKbdiBzV8TYW1mP89EhebmFOu0WEDPsQMgC%2FFIblvs5gma07asmr2HX6fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfaaba46a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-07-01T21:00:47.755737Z","times_seen":28,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-36ac775f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-36ac775f.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-716\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUFdfaEsPyGS5q6%2FM%2Bag1ra88a%2BtXdmhnOxNWrRyCJan6aX1ch7N3ExOELBWRc9Tl5hKXU7MpAgeUOh%2Bu84WNayu2QCxJkDe%2F1Obgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa258bda106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"7dc571e1d41872c19d3e477d67867cf1","sha1":"fd5d38c3552d5cb005b2dd4b72b129dd1420407b","sha256":"25899152b3f7de4f92c83755a209ec165df005954b3ac2e92177c7d9d5bc5ceb","sha512":"68d28c6f616d8c2c34ebbff051f58cf2025a58b992ccf121e3544d094c73700b50071e2a367cc4c6d05579695fbafe0fa7df69f1c0ff9198f0880fbae6c4e355","ssdeep":"","tlshash":"943185c2b4d73579b376cd9dc0984860923c0d48f40597eaf17f5c2e2b601c0bb1ab18","first_seen":"2026-02-04T16:46:53.800083Z","last_seen":"2026-05-31T17:09:56.337344Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e569eff5.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e569eff5.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c1d\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KtzifE%2FvFnw9q3A5y1wYewUHOFEKd0wpqx5dznMGN3deSyVjQ%2B%2FZRjgp9JQbVXQzYW84TPxrpMcEcUsQdO4l4gfleiVXlXC5doJyUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa308e9a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"2562ceb798d177b66d9395e2981f7dd2","sha1":"8e0baadcbe7a13cc8813ffec842d9190246da0dc","sha256":"a8209a3eca8c528ad27217f5ede68eef9d79d86ec234a06fabdd18c0df83e17a","sha512":"b9be842f73d2cd40c2b1e4d7e85867f104662899836ec5e1c5fd111160e5a62032b748e48abeae5bc98aca8d37781d0ba8329336853f3703b8b31a90b84d6983","ssdeep":"","tlshash":"c1518221f042ae3cf3b750652098780865410fa899646af7b1ae5e0f23d9d726b9f738","first_seen":"2026-02-04T16:46:53.776329Z","last_seen":"2026-05-31T17:09:56.335162Z","times_seen":15,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-f72c7cd8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-f72c7cd8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-afd\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJQSW2RIUFy3ikIZ2ItCJZQmi0yC0xyInqUohMNNY23hpMP3K249eHhSWjpKrOjycnIh4G1jbtRNIsnH6QFkltaGCIliC9DHAzbizQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa47937a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"2b95bf4f272eef6ccabe6dd064b8caf9","sha1":"e541bc7fad14a56d07e8a6d8580b7d346bdd938b","sha256":"4bf7e2fc0b98ef92c1c244a9bbb4311021a6a5523c9191f152e98d7face9bfbd","sha512":"1208e877ca63d0edfac719b6e3e50fc80282c742ceaa2212077e5f840abcd66556f231a3905ea2a626dda60fef8cee6d26592510c35a59c220763a6327925ead","ssdeep":"","tlshash":"d45145c976242f7537538054d19e4d117321b03ae438fe2e36dda1ed8fe99835829a33","first_seen":"2026-02-04T16:46:53.867495Z","last_seen":"2026-05-31T17:09:56.250769Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getAnalyticsConfig?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9cfdcfa7be9bb28a-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 48\r\ncache-control: public, max-age=14400\r\nexpires: Wed, 18 Feb 2026 17:18:34 GMT\r\nlast-modified: Wed, 18 Feb 2026 13:17:45 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d624ae72d5da08a9698cf19ed1004a52","sha1":"d2da4fc91b5567dfa523c551f8b8501b43d0384a","sha256":"68df83e68b02e91713d9e5b52a22c297d98ec2d5acda0c37cb47162547cf35db","sha512":"90aa31b4915827753f86420e7b64e4f7685df1bf06908974128eb66b8699e549781120077589005dc68e9fd726c8904fb322695755e997ba1dd28a0b90e77d58","ssdeep":"","tlshash":"9a90020520487596c052c631c21157075d258e732d1460345025090990bb4750841823","first_seen":"2024-07-15T21:15:20Z","last_seen":"2026-07-24T06:52:07.922635Z","times_seen":650,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":123,"dns":31,"connect":7,"send":0,"wait":69,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-23a43da0.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-23a43da0.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-127e\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kq80g%2BTE8qxOUtsDkSjOOwFGQzcBuletosKrGnD2Q8erHB7YX1HwOpGkHYF77CDeRIlt5rVdPTy0KqlWQ3Y7nEscQrJMbb0KsWo5JQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4491fa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"31d761f11a6a640da2a8ae94065fed2b","sha1":"7faa07c2b610af19d7a7c9bb272e7b61e5bc9c67","sha256":"c6824b22eee43b6a27e5c14616d88cc4633c81432119b0e9a21f240a385ca739","sha512":"7cda7f5b1601f17b4420ee2cdf918b94883d116bbe0c97aee6d95bc3bb95341c207477644d519ef574865e8e68abd0e714234d5fb69845b7982000305a5ab056","ssdeep":"96:2Xs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:2Xs7o9KK8ZMY2vcpaC5c7eI","tlshash":"40a144d22daa262a3951d098ee5b8900e321c007d22dcebdb9dca1fccf595c3107e722","first_seen":"2026-02-04T16:46:53.846655Z","last_seen":"2026-05-31T17:09:56.19633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-d4dcf123.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-d4dcf123.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-9cf\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IPCwoVwTUi4bQOoFYPQtngA1vlAzVhkrys1dNJf66fKCm%2BcM5oFHjCY2%2BHutB40JsTQgMd4Jic6XipZNqNplzDLBGdulY1GjBVjO5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5e992a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"ccc0ba67ac93644611c4eb010d65cff5","sha1":"7e8ca42da2f9b8b46d4440ddc153e63e6e88e995","sha256":"0fe717dde012e8c497b02c33a771cfa51f1d53b940e3fc5b3ab73127db9b1e45","sha512":"55000d942a9362802b1f2f74c6c2789227ea7925a0585e380710de32a185bfb3383bec4ed11918bd992ae44994683b9015da5bc0941a429c498e404f9ce053b9","ssdeep":"","tlshash":"c8513095b213a8f7345261f9075f9315662438130aacd628b8dca596cfce7efb434523","first_seen":"2026-02-04T16:46:53.797595Z","last_seen":"2026-05-31T17:09:56.198599Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-3602d8eb.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-3602d8eb.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-18a9\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHJKiYbvbzdRVUhYj9YXIhbZGEyG4uMoe%2BpRJv6oRAA3Q2rJX%2BPH1GKx9PrZSe50qXbmHARZ%2FGMcDuzG3RFDsb8pdClS%2FG4%2BL2bYqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5e991a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"857dce2a56b95b8e123827a3639f7a14","sha1":"1ff9229ce23fce5904e92bba1d49164820bb3378","sha256":"69474e7d897d5e0b77fc6ee9b6a831426845c3aa517c9019c367f280b317c2b2","sha512":"9c82ee18c1c2308fc7bf47f83b99b801f339f10ffa8254c480d000f948065ff2f3cf8ba768778c6550fc44bf749a3f62cee73f3e800ef3abf275d68ad722bdae","ssdeep":"96:LLi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Xi0K9+N+DF5si6SJHG","tlshash":"c5d120d13e756e041523c939a7ae9d45d331a037cc3989be77cc91e08f9ea405aadb31","first_seen":"2026-02-04T16:46:53.840953Z","last_seen":"2026-05-31T17:09:56.191004Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2933\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\netag: W/\"f68d2c4950f0ddadd8e09e104ec4e425\"\r\ncontent-encoding: br\r\ncf-ray: 9cfdcfa7a96148d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60140,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60140, version 0.0","md5":"f68d2c4950f0ddadd8e09e104ec4e425","sha1":"a776262129e9223ef9b786f44d8718f32bc7529c","sha256":"adc78a8fe0174e7e1f6d4b4a267f1e2f1742088923635f36acc4eae42f953c1e","sha512":"390be30d7fb7b01e15d8a7c4e4412ac8507fb07a88ae04ae418f4d288bef57cf9a7db4a66c44fc4df738b6a58b59b66a57cfbb00c8d2d0b32984bdd5659531a2","ssdeep":"1536:kXpFvtCoQwH0kJLLpdNUTaa0TdlDz1mzltKA:Qp3RSwDHA","tlshash":"594302bc5a0243cad09991c5cc4c6d0d6f8c379597bea20bc6723b9a1523ba937bf584","first_seen":"2025-09-26T22:05:13.170618Z","last_seen":"2026-07-24T06:52:07.961604Z","times_seen":643,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":119,"dns":1,"connect":12,"send":0,"wait":17,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=3\u0026include=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9cfdcfa7be8cb28a-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1110\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Feb 2026 01:18:34 GMT\r\nlast-modified: Wed, 18 Feb 2026 13:00:03 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2606,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"4da37e289375b64ae7552b2506755cb1","sha1":"acdd72bbe25d8a5d280ad83adb768c0edee09556","sha256":"7ccbd0280b0eb5fbd6401cf1fbf53f0e75d5b00de738ba87bceda3dc20eed102","sha512":"336997783d51437605548b7c47f260c7b3a39b1a48f7456f052f261c475189b80e69824d4268673adbce497b8af344ef348bf461e8df99b1c6e3e752e7eef987","ssdeep":"","tlshash":"4751659e5780ddab5f349788e14cf9dac83ed00782cc58ea64f2c53440fe823b3119a6","first_seen":"2026-02-04T16:46:53.818162Z","last_seen":"2026-02-21T20:57:40.303275Z","times_seen":13,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":114,"dns":23,"connect":9,"send":0,"wait":71,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/trx.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/trx.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: sPUmoS54/Sxm7/nXNDZMtf4BjuB95eeZujJfmF47Y0+m0ItSypUnDZbSJXNI/fRVsM8NBytbNEH/v/8OEK+C0pq4zUi4LY1S\r\nx-amz-request-id: 6R0BE5CHT5X2R1FN\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:16:15 GMT\r\nETag: \"6868416c3e73ea6862b7595bc18525e3\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 610\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6868416c3e73ea6862b7595bc18525e3","sha1":"4c77ac014aecec29e584cb03972aaddd98c8738d","sha256":"e9c728057aad1b6bb1c591a6a462787ed05ab7371d71e1070abddbe84f6ac4f5","sha512":"7ac560e7c2c27a593f5a5924b79e8eedc5e5155779d61de17d24f9105129fd666a164ade4d25763af42c889378fc9f24653e711009b85c8936fabcffb75bf253","ssdeep":"","tlshash":"a0f0783e72e837747409d732737f88f239271f96f27a510822a51a04752261e144e9ce","first_seen":"2023-05-25T08:09:47Z","last_seen":"2026-07-18T07:25:40.631089Z","times_seen":602,"resource_available":false,"data":null}},"time_used":1621,"timings":{"blocked":1209,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/css/VerticalTickers-be1df74f.css","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/css/VerticalTickers-be1df74f.css HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: \"697bc72e-14af\"\r\nexpires: Wed, 18 Feb 2026 15:00:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 37064\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JjcP4qJviBIsuvsIVqp09YaYFmQ0A4v0zDP1j2S3W3thNTCVi%2BqpGDMwhmZH32icM5uEczge%2FkQv14Nlsb517xrNQHn7CaDDO511BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa238b5a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5295,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5294)","md5":"440cdeabbb9eab724c17f0b5beae3338","sha1":"4c99f5d4947c5450a2d24d49aa1f5784a6216b26","sha256":"be1df74f1c54fed82321f93f8c4813ebf34185b3e4076ee17c0f759ee15bfae6","sha512":"e5e18c4697a9c2e62fb24c35ce7df30295281af626884d5cc8c5efe85fff78d4b50cde4c4b1a56938438f0acaaa250ba8e6a6d666d942be0a9a8d3694d26afe3","ssdeep":"96:yl3R5eATYYFMhn81C8Z888kFXPPbsckvWZGqzJTtTlhI:yl3R5eCYYFMh8f2fkFXPPQvWZGqzJTVw","tlshash":"91b1772b63d61f19d133dd041be9225a83a8d1b3d2b523e8a4905b258bcbf0e15f3286","first_seen":"2025-12-10T07:39:13.841218Z","last_seen":"2026-07-24T05:40:16.10729Z","times_seen":52,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/send-7c4c9d57.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/send-7c4c9d57.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-8337\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxGjj7yyNcQJiZhnqu0YWtCOOxCA%2BTe9QDbvUlpkWatrORhYOSrMMjoYQ29SKF%2BP8qPANCVjp8cnkuR0438sDhUwiI1Wbqk3L8dbzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa41910a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33591,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1815)","md5":"7489b16b42f267c218ef7cfbab4684ad","sha1":"46e987ab1c1b6a59847022905fc0831bb3fdd98f","sha256":"5ab061ee31053f1daf73935b97a6583bd34e955555f06be45d9bd54c359decb1","sha512":"ce52ea00199b76f0fe058a57cb853647dd545e1cae7a58c3e7be5c2c8b50910475b467e2615c5447381a0ad0f3661cabc2088ba2260399c64bf3aa861d4ee009","ssdeep":"768:haYBoxUBzI7DFdh6woBifZmTusRCotkd+5J4IX8aPzGoVM/Vay4gAF/xc5FK:kYBpzI7DnbftIXVPzG2+IyzAF/inK","tlshash":"29e2e89433fa281d19a7516dead69e006331501bc11cc5fdfaeca2f18fa9a4249fb734","first_seen":"2026-02-04T16:46:53.768699Z","last_seen":"2026-05-31T17:09:56.22894Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-458e75c8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-458e75c8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-774\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ArCd1%2BoWwdJ0QMhdnvePnfodTFX7i8NpaKjwWApWX0NaPjhXPgi32cTA9ltFUyqqjwnsge7vyLoVI7HuvW4S33tJs3Y1DAHKMeX4ug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4893da106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"42a9d3ff71918637ab1c9ccb78964436","sha1":"618617651161c98e78728fb560458f10f203e7e9","sha256":"79e4b301cf0f80a00e2cb5c1eb1c0de359dae708d0296b2e1df3660bfe986503","sha512":"1afe6ad020737b31722756141b1842b83c9bf9396d3b2b12da7c9c3edee8137a8b0c9dbbe3def73405f5cfdf2a15f29da98e5bdf8daeca4a46dc9d9d2f9d9c3f","ssdeep":"","tlshash":"6341c6442268beb600c066d6c09685005125002c650fc594b7fcb5e2dfaeacdcfbfb3a","first_seen":"2026-02-04T16:46:53.819675Z","last_seen":"2026-05-31T17:09:56.252988Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-f72c7cd8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-f72c7cd8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-afd\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oboGfPGYNzgYvKA0BaPbGgE%2F1C%2FuVynK75pzZ3DFwgUjnxHQDxKHvFVt76toE7V%2Fe2sdd2IpGegy%2Bk8z4BNnaRgAYHJVG4v0WHf1zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f99da106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (609)","md5":"2b95bf4f272eef6ccabe6dd064b8caf9","sha1":"e541bc7fad14a56d07e8a6d8580b7d346bdd938b","sha256":"4bf7e2fc0b98ef92c1c244a9bbb4311021a6a5523c9191f152e98d7face9bfbd","sha512":"1208e877ca63d0edfac719b6e3e50fc80282c742ceaa2212077e5f840abcd66556f231a3905ea2a626dda60fef8cee6d26592510c35a59c220763a6327925ead","ssdeep":"","tlshash":"d45145c976242f7537538054d19e4d117321b03ae438fe2e36dda1ed8fe99835829a33","first_seen":"2026-02-04T16:46:53.867495Z","last_seen":"2026-05-31T17:09:56.250769Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Light.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42308\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2933\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"5e30cfcb50ec25f79fffffaac2364f7d\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:01 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9cfdcfa778d448d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42308,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42308, version 1.0","md5":"5e30cfcb50ec25f79fffffaac2364f7d","sha1":"76653a388d2ae80ba98b047a9fa20e02ec460eb0","sha256":"1a42c3e5b778748710613a6f6bd648758d2d8ee02f467d3432ebc36f82b54f84","sha512":"c8c6145cfbaec98627143b7a01df0ee5b215e35b0a3afd1594eff09432eef419b3367006d53ffeafdd19f6a25b4892d15461d055a64c213e3330c1f99e189fbb","ssdeep":"768:TDMkmH7mSCRTgwe651Yt9/+KBR6RGrowfrR0szvT83n0/JhHmR:HdmH7w/e65e9XmRGrRfrR0sbT8inmR","tlshash":"b713f2f61a673ecc22be9e1c16834dd9ad85737d4ad23f1074b8b0c2c27c68968da611","first_seen":"2025-09-26T22:05:13.131598Z","last_seen":"2026-07-24T06:52:07.910499Z","times_seen":639,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":96,"dns":0,"connect":8,"send":0,"wait":26,"receive":4,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/v1/api/config/platformConfig","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:32.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=si%2BVYzcDeMG9jsfK0GEFBLgFykIbmgwMJpZd%2Fi1pIQ5eUABjvutjx%2FNs66wOvVd%2BFXBnlxVYapY1o6Idul4dHaoKjGsBPtqyjF%2BFag%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdcf9f0839a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eacd0ba7f5a2782bad319c2e9ff1fce2","sha1":"fd8c4e52153d72f25adc46fab5da7c1644400127","sha256":"01d9351f4d80d3bd11156d748797232a9fe1932a0bb582a756d3b587766a9d25","sha512":"5aefab2624dcd719f8d4a50bc11def8d23981814cae2f4fcce06e7cbd03560a489c16848afa91f33b3722f8344737f9b0ee0e532e87b395dcb92a9c84f339519","ssdeep":"","tlshash":"1381518e372ad5b8c6e415cbd4d728190f79a9da6844f44fc29bec683ef78d13128217","first_seen":"2026-02-18T13:19:03.981371Z","last_seen":"2026-02-18T13:19:03.981371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/ref-826e0ba1.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/ref-826e0ba1.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-86c\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QxoFOqOLpn%2BBJ6pP7oq7uAycQqPHmqr1iodUfraobo7QcNBhHEuiOuuoFjyhi1IxrBGclsInn9XlPP1Kjy8SWOM9p8NcSCdU4WyzuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5d989a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"2e132ab88957c55a3435e8f009fc8518","sha1":"1d51a5ea26f3171186efadb3b4984462078796f8","sha256":"07a9877e1a66c2405b5df7e17a832afa52706e88c777d1f08385a2d1315de871","sha512":"76bf398b2e46e52978f323c98e0ef6689463514d0c34eeb00de10a5ca56b80ae6da8ef78908ff17f8134dad26668e05f468e17f755a7ac81f8cd85812d1c9301","ssdeep":"","tlshash":"e941039773d801d212cac6e6fc37892af11131483a25845cb0ad6bf7e8306c791bddb5","first_seen":"2026-02-04T16:46:53.874417Z","last_seen":"2026-05-31T17:09:56.213446Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fb575795.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-fb575795.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bdc\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vDbjP8vboP5RaF%2Be8mVjqbxpmMLZyZnOBn2fzJc8%2BCRs32v7dVkm%2Bjih3kw43RmDYakpHGQGPRdBjP99wp8Pf0zJp5JrMnMvCnkDIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f99ea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"bfbd4d4111a878f1499dc221cc34ee00","sha1":"ea79aa5e373e5732d0d7f954dc18d35482097f23","sha256":"ced931c158dc0c3ab102dc348b126a71ffe88d5894dae2d04337a0007d00e035","sha512":"54cfd6160dd4088372ee8c9c668e763f3201ab5449b6653020a94b0198bcd03e7b4261608f35eb056c1c1cd10247635b6b925e957815fb11a21a5538872e8c01","ssdeep":"","tlshash":"7d516485a666582d520390adc77f4c01973ae41fd029cafeb7dc50f54fba98115ba331","first_seen":"2026-02-04T16:46:53.772028Z","last_seen":"2026-05-31T17:09:56.361015Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bch.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bch.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: bv6v2lT9K2UFOou8uKpcnILB+L6CsOxZLqfJu4en0+6hoy0TS7jW/dyOht6iB6bxPNY1Efs2HMIcTsUxtWH9hnPy0aUYpCyo\r\nx-amz-request-id: 6R0BNA8YCS6WCV1J\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:30:25 GMT\r\nETag: \"a62c25ec1acb1fc3718098578b388808\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1953\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a62c25ec1acb1fc3718098578b388808","sha1":"5ca0181b69511c10a14f3927fec31a9ceb00f067","sha256":"d600c9ea66bcc09bb7c8462506b8946cf3afe92cb717ee86ee2d660a154653d7","sha512":"4fdc1adf49350c2f5362f58b469651a926221e7b642292f672a7bb25de1ed25a4e26c5b709fbc4232d3a03d9b19681a8e24b13d92a009b295f79231e3a90709d","ssdeep":"","tlshash":"ae412e60b3aa557df410d3f88a2da0b17e733c823c25d10e9af60929a66181da030cc7","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-24T06:14:46.339376Z","times_seen":278,"resource_available":false,"data":null}},"time_used":2052,"timings":{"blocked":808,"dns":30,"connect":389,"send":0,"wait":424,"receive":0,"ssl":400},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xmr.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xmr.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: cDIlCEq34KMw30qWzHx7Cj+9XuJZ1W20PO/VGV5/nsq25sr5rsO4rIEwYqpYZtm/469yN2SisxYnB8BMlrz3btRXmoaEkNgS\r\nx-amz-request-id: 6R0DNB0C2SHSXCSW\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:26:40 GMT\r\nETag: \"fdddffb238bc363e6e7d7e9fb8b2cbfc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 627\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdddffb238bc363e6e7d7e9fb8b2cbfc","sha1":"2472cd3130002709666e130d8bc96fe1fe23fae7","sha256":"d4056d45614e9aa58321b8db2cac9ecbc6c3d9048d49ccae12a6ca5a5a31a06a","sha512":"da68083024e8e5b8412c24febd6fe422cc780c08242b2a4ccd59ff1c37feb820e78046b3732991589d28681f4480661505107dc06616f178be39b310a7674fd3","ssdeep":"","tlshash":"64f002a8f1d8a71c78086344e73b6be061d17ed5f6434351f388bb25b2440569c106d3","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-07-24T06:14:46.317311Z","times_seen":160,"resource_available":false,"data":null}},"time_used":1525,"timings":{"blocked":1223,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bone.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bone.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: H8bMyvNS3UKqwDtIEoed0Rj4L7PyVEuzb6iuQJpJ212Av8MVxGr75OI7NJ9MH3nwQ7TCw3EngI5jUyn2pe2bzCDyP1fTdwTZ\r\nx-amz-request-id: E4ZE7K30C7HB1PX3\r\nDate: Wed, 18 Feb 2026 13:18:37 GMT\r\nLast-Modified: Thu, 05 Jan 2023 05:37:41 GMT\r\nETag: \"3c335279a6cf73c3947a05b71e83ba1d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 53957\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":53957,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c335279a6cf73c3947a05b71e83ba1d","sha1":"b59ad0c11cec77b11ce7b08ac3f244e84c2ec0d5","sha256":"083b7872dce2acdfb2dbc4bbef367d7545e5331ddd0d4dbe86c50d770e2b776e","sha512":"0b00f82985185f1577f14be2e3cea878ad7e8c7ad03e51a2356304aa1816ef61e6d4c067a2becfab32cb11d8ce531a5519714fd178610ea7d598bbe97ae8e5a2","ssdeep":"768:4QIFYPg2OHJMDmqsgVnRd4sSUT0A40ZK4lkULDR5Cf0PNsUaqqvavAbItNsELv6:Mkg2OHoVdH2swA4Y3ZVsUaqmaobI0Em","tlshash":"b333f19b0e3f32bf0c35391a51fe22570b5f2c9c925886dc5a089949721bb243b3866e","first_seen":"2025-07-05T16:42:06.938712Z","last_seen":"2026-07-24T06:14:46.364104Z","times_seen":78,"resource_available":false,"data":null}},"time_used":2108,"timings":{"blocked":1524,"dns":0,"connect":0,"send":0,"wait":303,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-7b62a5ba.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-7b62a5ba.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bc7\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sSo3h5uFbzj0QPTnasJHse8mBi4OoCPsn%2FQXJF8JTpK%2FBiAikxlKM7bA7GQqYfsZOc1Ti%2BjpZhIyMGTOC03t9WySID%2Fd7pOh5MeHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4491da106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"55de4531b10d61783e873c98c4180a60","sha1":"246e52e69588c3d6812352adb23a0d0f9d14a5a1","sha256":"b26da8ce31d9123427739c7c6ef85c819e84a58b0941a18467b47e687f9a226a","sha512":"a9072e0a7ed3b8e5e1fc3b1d6eeac063779a42e3e56ea419ebbcd15d1f74ef45691e5018ba780e5d2e076ca0130108ff41e95ed8c8bcd26e71b2dfc790836a20","ssdeep":"","tlshash":"1a511088bfb43d63371bc065f0ae8521e335a03a982c9e3e739d52f84f59682555da32","first_seen":"2026-02-04T16:46:53.869137Z","last_seen":"2026-05-31T17:09:56.24937Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e741169d.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e741169d.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c3b\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMYgA%2FMnhKHE4HH3oQpzoWr8YkSQ16lc1s52O5XPenoXJuVA4e3C95Y8MpgERRCtMnbZkzkaUmkHFdBtpHBeye10QmT2vNb5DIpi8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa44920a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"5b62b9b407c529fc0da47e9ba1970838","sha1":"e8e33ef821c1a209d5faa67ecdf5ed44a2601102","sha256":"4bc5ad130c6753c244d1f84e333a73a401d6260e12850add9bc8ad3e4d5faa35","sha512":"525a807cf38aa58f8ae3f7b058fc3795e9f894e150aa2d00f898238e8a40e743dc49817960f46577de01d27f2afa8ee0cad992446fe79b5113acbf2528f0a6c5","ssdeep":"","tlshash":"d95177c5772b50b49103e0d40faacd400b2291179526cabfbdef71f58fae7496819332","first_seen":"2026-02-04T16:46:53.839579Z","last_seen":"2026-05-31T17:09:56.208641Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-3602d8eb.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-3602d8eb.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-18a9\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwh1avzFJMkWqBeywB5u%2FRZxMdSc8m2zOFKEGoeh96oa3pTIpyGP%2FAwJoqLQ%2BxYZ%2BDyB2mqbrMblpSuzEFgpU3II5WCTywnIK1JqyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa45927a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"857dce2a56b95b8e123827a3639f7a14","sha1":"1ff9229ce23fce5904e92bba1d49164820bb3378","sha256":"69474e7d897d5e0b77fc6ee9b6a831426845c3aa517c9019c367f280b317c2b2","sha512":"9c82ee18c1c2308fc7bf47f83b99b801f339f10ffa8254c480d000f948065ff2f3cf8ba768778c6550fc44bf749a3f62cee73f3e800ef3abf275d68ad722bdae","ssdeep":"96:LLi0eWq6OWC+N+DF5si6Ph1y1blpXoREPcMtzJvc:Xi0K9+N+DF5si6SJHG","tlshash":"c5d120d13e756e041523c939a7ae9d45d331a037cc3989be77cc91e08f9ea405aadb31","first_seen":"2026-02-04T16:46:53.840953Z","last_seen":"2026-05-31T17:09:56.191004Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bsv.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bsv.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: vnPh/Op4jrR3tFLgzXtyJ3IFZCPeq5XMIlLd7h31PFvfzShC1Kt0r0LxefQJWdrLxC/IibgjkL/N+5U9srfmur0q6n0asTWo\r\nx-amz-request-id: 6R033XWAE3W00PR1\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:36:30 GMT\r\nETag: \"0a6c14a948ec11e6b3bc19ae2aed7c22\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1817\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a6c14a948ec11e6b3bc19ae2aed7c22","sha1":"0f79ca42c47a7a37253f23b608fcfbc2493dd84b","sha256":"fdb30ade7093c96b4c5968e4a3721388c3be1e0325266645f40a995d8667486c","sha512":"3d6acc8ed9dae0981c23574fb5319dc64591b22082392253e9da74f64832f45cafd2db8a652d40478edbf2752c22576938acd4757d6ce293c34653b4e79e8233","ssdeep":"","tlshash":"78312555a370f368b904b3f8d36494b1752664fbb253d50896fe2125fb4881e0cfb98b","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-07-24T06:14:46.405917Z","times_seen":367,"resource_available":false,"data":null}},"time_used":1585,"timings":{"blocked":639,"dns":29,"connect":284,"send":0,"wait":300,"receive":1,"ssl":328},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/xrp.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/xrp.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 57hp47MI0a5vL+rs+l/zksUpWVgKRI/8tBMtRI4fQ7AyGj/vJlPEoSxdA2PRBHLmvswZFbqFIxX1YccOJQf90WFSdfGuq/WH\r\nx-amz-request-id: 6R0D4090VEGE5VX0\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 27 Jul 2021 10:27:13 GMT\r\nETag: \"b4651cc9032d4aa180b49d44dee9f6df\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 857\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":857,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4651cc9032d4aa180b49d44dee9f6df","sha1":"ad2c09017920248932ad46e869c10ff7ddfb613c","sha256":"9fd7f3b81a4dfa790611dd504160cf34d71387f0cb1c760f577cac2c063be9f3","sha512":"95db416bf9d681fd53f367d3a2a3858a2d8c9c51ef3bce7432140c84c48f30566e24baa9a954abda1daf7df3ba771f016f4a7ccdf5fe017f099b36b2acb37e39","ssdeep":"","tlshash":"e211c01df4ba6b39f60552e017f47424b2b2ab4d2602d09865386ea0fc794aecdbc0c7","first_seen":"2023-07-01T20:42:20Z","last_seen":"2026-07-24T06:14:46.325637Z","times_seen":234,"resource_available":false,"data":null}},"time_used":1368,"timings":{"blocked":1066,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e1b9a5f8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e1b9a5f8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bb2\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bo%2BJ%2BBw8%2FuVQBicPbkxiSYHIFO4ojSzsLJVSSPxQxil3qStgJkEh4HCzm11DoSkAuLdvF0uw593Fh%2BEhqvJU9qCVuHdf%2F7HNiV%2B%2Bjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa42917a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"0c3f1e3d66becdbf876d67407987f2dc","sha1":"b6efd3fb79b3e5146f2b59a995d20aa0b8784781","sha256":"b66e09020f350c9823f77bf751c7baba3919c405a5136ec51f11feb7b18f2422","sha512":"c98d93e492cd661f7d762c6a5aa78a9d825caed0d31431dc6017046e0f58131f6ba749a9a484b34e839df79d4bc41313627bcc56c0fa74fd6ef77a1aa24a7e98","ssdeep":"","tlshash":"1f510dd1ffa8a26ab70bc1bd145ad910e333f00540295f7f7bca12f14f5d684241eaa4","first_seen":"2026-02-04T16:46:53.82164Z","last_seen":"2026-05-31T17:09:56.234828Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-d4dcf123.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-d4dcf123.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-9cf\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3LjCXns5WBEKN6zlFwXs0XOOZRop6SFV7mSws2SwYdYyqDBQjpa%2FQTSSw9DEvc61BiAqQlZFR7PL34fVG968Vtld10s%2BLnerJd3Kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4592aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (621)","md5":"ccc0ba67ac93644611c4eb010d65cff5","sha1":"7e8ca42da2f9b8b46d4440ddc153e63e6e88e995","sha256":"0fe717dde012e8c497b02c33a771cfa51f1d53b940e3fc5b3ab73127db9b1e45","sha512":"55000d942a9362802b1f2f74c6c2789227ea7925a0585e380710de32a185bfb3383bec4ed11918bd992ae44994683b9015da5bc0941a429c498e404f9ce053b9","ssdeep":"","tlshash":"c8513095b213a8f7345261f9075f9315662438130aacd628b8dca596cfce7efb434523","first_seen":"2026-02-04T16:46:53.797595Z","last_seen":"2026-05-31T17:09:56.198599Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3090\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa7be57b28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 29204\r\ncache-control: public, max-age=31536000\r\netag: \"cfmK10fIs0rtXK3D1w_qZdnstVfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=653+4 c=0+3 v=2026.2.8 l=3090 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8e093ad4a0e0bf420966897e5d52611","sha1":"90172a764ff649c9553d8e84ada46adcb73f33ed","sha256":"4a00efea74245ceacea37a3e83f0a4a2830236143357d3c57e96c4dd154d593f","sha512":"50b07fcc6d1c5460e69613f4509eb8323b11b6634ea8f268bf541eeec6271bfc5852200c34f385ad82d44c3e3f70122e783f1669d9d356d65be4ee82a20d6546","ssdeep":"","tlshash":"d7515d250e57bb7f0fa7793b2e97c313955320052e06b200b624f75101940863bf35da","first_seen":"2025-01-22T15:25:28.982905Z","last_seen":"2026-07-23T17:44:18.666547Z","times_seen":1206,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":114,"dns":27,"connect":7,"send":0,"wait":65,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/bba2c8be-7fd1-463e-42b1-796ecb0ad200?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 374\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa7cea1b28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 82358\r\ncache-control: public, max-age=31536000\r\netag: \"cfCUkmfLSHImn0WVCsJt7FCSUffmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=420+4 c=1+3 v=2026.2.8 l=374 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2a12155c6bad8cc78944c7bfee468b1","sha1":"3684a6988254eeebb4ee2df16fe1d053e07995b0","sha256":"09eafc5ea66462e38244d77d3c57b5f09a16d5de53ada131c1f847ecc869887a","sha512":"cbd356e3a836732175d690418bc1e48eb99cd9d673d21ca092ed1e6d698a9b69fac87072890f892af66375dc903af2c21e29ed31408114609861c059e1e48225","ssdeep":"","tlshash":"7ee0608a2235d2000ec0fb00682b20ab92ec3554bbf30930981aeb2204a7302e342ebc","first_seen":"2025-11-29T02:31:10.911784Z","last_seen":"2026-07-10T12:36:30.27149Z","times_seen":50,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":117,"dns":24,"connect":7,"send":0,"wait":59,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/ba0ba0cd-17c6-4806-ad93-f9d174f17900?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1020\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa7ced3b28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 37168\r\ncache-control: public, max-age=31536000\r\netag: \"cflmU5jeS0gZTTUT6JXX89Y_wKfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=395+2 c=1+1 v=2026.2.8 l=1020 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8d08a4e1724ddbbaf3ee6372a6cc5dca","sha1":"ae18af289498c86d780f29f792e5dd1576239c87","sha256":"d1839a6158939a008a3bed2480ae5fc4a3ccc818b0bad78375758b5da90ebdae","sha512":"fcd457f698b2328da1e36faa98f33e6c5932ee3e3038d64e1fcd49cd3592ec87c57f17c4b751e258a0f2b6abb645d1ef840c73ef6d1e2bf617319faf2369d6c5","ssdeep":"","tlshash":"da11a878a4171e44e1712f1699ee33e9dd263c5648dd8133f062e6904017847a2383df","first_seen":"2025-01-22T15:25:28.962767Z","last_seen":"2026-07-23T07:46:41.568985Z","times_seen":1240,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":119,"dns":21,"connect":19,"send":0,"wait":61,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-7a3\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BasuypmTpsafvVRvmO6dUcHTwHZrFA011181KitzBx6olDQf9rfWOPEe4PwwN8lXO6p2uwHSsjFBHVcRv2oijdeIvs4bgSg0iwtig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfab3a61a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-07-01T21:00:47.72394Z","times_seen":28,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/v1/api/config/platformConfig","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:32.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /v1/api/config/platformConfig HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lURObPxSHxexAPLYSWjnUBFw5hQ8KMqZET7TFjOJCuqxDAjaH6aVGbpHQ%2BuK7dvUxEX0FJVgSF6KE2kz3LEsc0V%2BNR%2B2TWFYL0tiow%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdcf9ec833a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"eacd0ba7f5a2782bad319c2e9ff1fce2","sha1":"fd8c4e52153d72f25adc46fab5da7c1644400127","sha256":"01d9351f4d80d3bd11156d748797232a9fe1932a0bb582a756d3b587766a9d25","sha512":"5aefab2624dcd719f8d4a50bc11def8d23981814cae2f4fcce06e7cbd03560a489c16848afa91f33b3722f8344737f9b0ee0e532e87b395dcb92a9c84f339519","ssdeep":"","tlshash":"1381518e372ad5b8c6e415cbd4d728190f79a9da6844f44fc29bec683ef78d13128217","first_seen":"2026-02-18T13:19:03.981371Z","last_seen":"2026-02-18T13:19:03.981371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-d51bd663.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-d51bd663.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-12eb\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8c3FAZr0hdn4x059P%2ByGf7ePFbwNp01tuwS4hmf6jPjEQC2CunK2J8cC4uSocUfalD%2Fw3FNa5VXl%2BtjyMlQ0o6tZUHsNRZkY6GE5bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa42916a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"a19607a0e1b15c69b360cba28b08cd0f","sha1":"375edb41e0cf4bba33779cd2c2de454f2f344556","sha256":"58612615012da8292e218083b3448403718f884ead7f3e3d7ab933e0e9ca2eb6","sha512":"9712a82dcc42d3301c97fab1f6f2a859ff8891a5493b9a2b1de694a8ce298cd6d5d6f781a2dbc52448b9a0cc2d29a28254e9fcf556ea7a3ae62b7ae3955f330c","ssdeep":"96:GRhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GRhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"58a1b6f775a7e7e0951787b1ccf73811611b3cb6bb064e0aa58caac8de16184868ce10","first_seen":"2026-02-04T16:46:53.906874Z","last_seen":"2026-05-31T17:09:56.251977Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-39a44663.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-39a44663.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-42e1\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OL9WKjUSjaykXg7%2FTAEhKty9bcXYbB12HuW3il5m2fkTKLlNfxbLZaOCBR9gTHqFSFVPQ4ZLaSYRoMEyXAQV5k8xWwq5Kows1Mfkyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa46930a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"9c4095365d93ce99d59a0bbcfb3571af","sha1":"b2027d2c10d0d6869941bdf15408ec5205da8a5e","sha256":"6fb8abd2e0f29cef2c80e3c88744a5ef247b524fa717637f281eea31367165cc","sha512":"89ef5965c4910b6862b3f2229173b5e927d74ea4c65390e830d7fe8b039b7dfc15fdfbae6c3c2a63a5892935ac3911ff579812086818732980fecbbc3d75be03","ssdeep":"192:/BhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:/0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"2572b7ac3693bb28a9875bec26f55150f6343812442ed5bdb6dcc3e28f16a844cb2371","first_seen":"2026-02-04T16:46:53.890002Z","last_seen":"2026-05-31T17:09:56.279518Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-bd925ac8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-bd925ac8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-19ab\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xxVuRtPUsuwwovEMuBPdo31JgTU68EzDCuVYTEmckJv%2Bjr%2F5CVTwN53cVCtpLCrSajZz0%2BV0g2IVOg6w6VHO37WzHNNk3c1G48Egw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa609a5a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"908b4d49e60de0f0eef5cd14e7141dc3","sha1":"ccce6c443afae8fcd004104854e4a6e8048ba84e","sha256":"f0f76ded5e71b63742052fd2ca4f49b68d25e0248e136cfb90198e498197d43b","sha512":"779ff0c5c21d8faac36ec4d7d3dea34c8d74c32b41fa15612907f95dcf0db800b3d1ac26ce90b97a09b4e347e948817fac9dff44bf39c87b2552bc2964e8cc98","ssdeep":"96:s/ZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:4ZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"12d1b5bf3d666815a632c0a49f928c04d13190175b0c8c79bbfd19e8cfcea89766f764","first_seen":"2026-02-04T16:46:53.785273Z","last_seen":"2026-05-31T17:09:56.316243Z","times_seen":15,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Medium.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTeka-Medium.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42388\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2933\r\nserver: cloudflare\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\netag: \"b4654ab0ae548e33ee07aa61dcffc61a\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9cfdcfa7584a48d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-07-24T06:52:07.920545Z","times_seen":680,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":81,"dns":1,"connect":8,"send":0,"wait":18,"receive":4,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/7e1514ba-932d-415d-1bdb-bccb6c2cbc00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 910\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa98f7bb28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 40470\r\ncache-control: public, max-age=31536000\r\netag: \"cfmeYviP6kCNFgjEWLRBgPUJnDfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=310+2 c=0+2 v=2026.2.8 l=910 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75e06389f1522e8619d51b4aa5249049","sha1":"2be7ecc59449e73efea55ee6f7d1a7ecfe2cebc3","sha256":"8e352c8a9e65670d43fa8709cbde5535226746cc4d4777e07b251e117ca4aa95","sha512":"81767e30786a7529278208cb567b4d4438585fb0983d2bc74704570f01649903875897309a86f4114b569bf17288115813904fe1becc997adc5f6621242fa0fb","ssdeep":"","tlshash":"5611f7e348aacc3ddcbd98325416b475e603ed0802f55e0381202ee420da42697d3a8a","first_seen":"2024-06-14T00:48:21Z","last_seen":"2026-07-23T07:46:41.566392Z","times_seen":560,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhInfo-6eb82573.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhInfo-6eb82573.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-ad8\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTGe7y4L%2FrH2I7sCiYm0wnIgYamudjkQOjqzjJdl6fdZOGnOnb3RsMT3kssuH9gJVqRY9Ap6LltL5k7sYhm5mCnO3QXM74LSyK8Dkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfaaca4ba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1754)","md5":"68b753f29c283cec4d7d44380b948b7b","sha1":"e012e18a0490fd537b2093fa2719df08d80bfd09","sha256":"137bc026fd2f15f003c69bc850a9db9374f2fd7686b01e72c24430748867352c","sha512":"359320e128f7569f9d17bc994724bd5b0344ac0c2f477d4a3b77083ad14673f8a546114c134e6221fe2edfd62bfd4fa553140e20d265c0c8aa6af5d39d20928f","ssdeep":"","tlshash":"f35101fb339137bbb2d0cfc08aca85164134d28bb18551a9fb999698ae14c53b974335","first_seen":"2026-02-04T16:46:53.798441Z","last_seen":"2026-07-01T21:00:47.792187Z","times_seen":28,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhCheck-1cb2a956.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhCheck-1cb2a956.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-83e\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8wCtGYJXhu6RtKj3Yq3XGuP%2FuX5Rtz5esXwhvyxBkkNX9Mx2lcHV079BwKo%2FQBEy6IGhAbX2FXe7A2sdh9arVXLzQPRJ%2FtQnA2TWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfaaea51a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2110,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1086)","md5":"4e68bf5c8daa32ba729eec8d539b58a2","sha1":"75b72206fcbe09e7b4c87bbab971123a1081c099","sha256":"2ac4ceaff3ac10f8152ae2db6732ec5cfdbda3b516e93a4bdedebf756424f1aa","sha512":"0af2a9a20e040ba074c64c9b9b190fb9b1173e4106f88650c7b0dc8a316779714a54ead54636b26ef0a3f1ded3b0635c6a5ac78823c9e4c6b819c4a625016368","ssdeep":"","tlshash":"ba4135bb63b677b337c18bc107c4890506685207f685eaf9fb5b65982e804d3583d735","first_seen":"2026-02-04T16:46:53.782877Z","last_seen":"2026-07-01T21:00:47.745625Z","times_seen":28,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/SwapController-128e9645.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/SwapController-128e9645.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-35f8\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rjUedj84QVeIW%2FhYvDg%2FjglBa0xYPZldgfPtsaZQdcU4aMFddGwF76alUpLPxX404NEV6iUoA02QuQ4QiwU0eM7fSrLGai44I3ykQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa45925a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"3a23b35cf6ca988ab9aeb279a1e26d12","sha1":"df30264fe8c72bd9e210c1383b04ee04fbdb50dc","sha256":"18e8384edc749aaca88551841f732f14a376ff18daf940109d10ec12732a839a","sha512":"4669d2966d2cfa8c2f924439adac24c805d28b2fea4d934f18b74b116803a1858ebdf05182eff503d4b22b98c99c799afc7bc9646c6d897575ec4425b0be68b8","ssdeep":"384:N40FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:e0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"c05263a27360b676471e729879f9131025221cd4e86eb4ece8ad05e30ff159f1aeb921","first_seen":"2026-02-04T16:46:53.875997Z","last_seen":"2026-05-31T17:09:56.212525Z","times_seen":15,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-458e75c8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-458e75c8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-774\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrvdaSWtDPAIUSNi3rGokCfl3pWAG3kMdu5EtWGO5%2FYM4vsOKy2xqpEt5JZbvVqK3hlhe2cqPr8FB1Ex7W3ucQTu9nMn%2FGJwleJRUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f9a2a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (691)","md5":"42a9d3ff71918637ab1c9ccb78964436","sha1":"618617651161c98e78728fb560458f10f203e7e9","sha256":"79e4b301cf0f80a00e2cb5c1eb1c0de359dae708d0296b2e1df3660bfe986503","sha512":"1afe6ad020737b31722756141b1842b83c9bf9396d3b2b12da7c9c3edee8137a8b0c9dbbe3def73405f5cfdf2a15f29da98e5bdf8daeca4a46dc9d9d2f9d9c3f","ssdeep":"","tlshash":"6341c6442268beb600c066d6c09685005125002c650fc594b7fcb5e2dfaeacdcfbfb3a","first_seen":"2026-02-04T16:46:53.819675Z","last_seen":"2026-05-31T17:09:56.252988Z","times_seen":15,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhX-3214edf4.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhX-3214edf4.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-9c2\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ko3N6Yq08V7T3t0oUKM6Rjq7pqFd8lrEPVZ7fZaBI9VaBVLyl%2FPbKCOJ0JfL6IpfnIiO8wSz%2B%2BrRPC%2BNr5c11QhfpYmjIYLdWPTm7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfaaca4aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2498,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1482)","md5":"cd58fe8dd02ba4c480353c9ff123fcbd","sha1":"c0ce39edc542ef80a5e860de00c4b1a194da22a4","sha256":"4c5bb8d1f3de942b0664252bd0cf6178190d187eb8d5c55d38876d2047553c2f","sha512":"835faf9ea8d7f1a8ad00cec2052f5c18e05410fee9a246352479839866e598e9dc6780acf351240926076895b1454d0b8f014ab09d9d3d13859a37b49cbb3b64","ssdeep":"","tlshash":"785140b7a7e2737b27c08f910bd8458906e8510ebb83d6f4fb5b52a82d458f39038761","first_seen":"2026-02-04T16:46:53.865631Z","last_seen":"2026-07-01T21:00:47.813552Z","times_seen":28,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhCaretRight-43fb709f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhCaretRight-43fb709f.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-7a3\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nAmamAN7iTfP5LKaSnDttcMAqUBreSw%2BgjKlxubjA8nn8FS9KLusxHuH8SsOgFkUSLP3ZFtbxdxRKVKHT5Mvbn8LaJT6t%2BPJy2S85A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfab3a60a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"1fc73f473f3a7e337784e078822a6b72","sha1":"8e51493372ebe99c28bde81a21de5ef2bb358a07","sha256":"b8f98f64ee6cbbc6102f21a686e2efecea31971d562c4a9d6190ffa0425dda25","sha512":"55f203883f80037a906291b04fd74ed13847611085696b6893a292b767a1fd61db685263f7a40d3bfa04791b07d1f6092173c95bafc88c42b082c2ffc46f43c6","ssdeep":"","tlshash":"184152f7a3a367b2578887d147cc0144222c6357b196e2e8f79a52e02f614eb9474337","first_seen":"2026-02-04T16:46:53.76618Z","last_seen":"2026-07-01T21:00:47.72394Z","times_seen":28,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/v1/api/exchange/getSymbolConfig","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:49.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:49 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYTR%2FnySGWu8%2FU%2FXdOLRK9a3fU%2FLOHucTf%2BXMwSamZP5N%2FTBmBbbfI5IvUaenDSg2POZsiH07R%2Bf5ObEXwu6oiuBHs9R%2FGU0aA8jlg%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdd005d993a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7814,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3ec50dd675a6492bf1c0bf84e6507b3a","sha1":"4d01bf8f63086ea9f05b7abb2989c0fa69aff862","sha256":"1026e7c2d0a6015da3604cc3bcae572b98df1046f7291dd38fd8af075bb7bca0","sha512":"ef5824475d861c1b85e0e1c2c767df9d64253175c03db750c0d538c84d5c911cac9e49a789cfbd67070ad459100d392e207a0517367a3453eb31aec4f96ed974","ssdeep":"96:DlxlfHKMUgI0bFt3FASylptVxA5ZVpzFk9LD0EyDdLP1ql900BYanhgKjtTdGqU1:DXDbSSgZQhcv0tNy9h9hJzSZfip4r5","tlshash":"49f1d95527715befc420a1c21cd23bdc596f65a22cc60b82a5fe9e9d8308dee3523726","first_seen":"2026-02-18T13:19:04.010341Z","last_seen":"2026-02-18T13:19:04.010341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/receive-316eb367.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/receive-316eb367.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-19dd\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gs1ZeiyLNk0bVD9E2H5V7MrjDIGQ%2BHUfuW9S%2B1pFgtQf0IAMwI06mzsU8SG0zHsBrlKwutAv8A7ClZFYb2W%2FFZ24U11H6oCognh8Zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4d95ba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6621,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986)","md5":"46b7be9a4e75fe3e4fc12e8ae4fb9f79","sha1":"659d02ced628ba643801d574f231b35f47aa5ea1","sha256":"a041868e1060bf435465819b626e55df7edc54b8e9d6418c0aedbbaee7d51e3a","sha512":"9cf37e1b61ca0893c44ff732164606acf71ef6f984d4ad88822a0017fb1002672ced2f1f48f0c063b129947c30c05c5fb2985201bd1360ec69e5c26130c51334","ssdeep":"192:sIH9KKjVHTDvmuhTDsX4ZXu9hjmpqAY4c:sd23vx30IXuTjmpqAY4c","tlshash":"4dd1d65659f638adb803d0981e969a00c131404f9539c5fdfafc83e5cfe968689ef722","first_seen":"2026-02-04T16:46:53.886927Z","last_seen":"2026-05-31T17:09:56.229632Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/link.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/link.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 5+wf2m8nu5qUqq5XgN2UvWjKGEBQ5StDK5T+auT1CeM2YW8jTspwokXVV0anBWI8hbyQsjLV7NBY/PbxgVEaRswYN+rCkm8I\r\nx-amz-request-id: E4ZDTCXC2KQNK90F\r\nDate: Wed, 18 Feb 2026 13:18:37 GMT\r\nLast-Modified: Tue, 27 Jul 2021 09:01:11 GMT\r\nETag: \"3cfdbc8f3e987bcf7862cba68cb369cc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 681\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":681,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cfdbc8f3e987bcf7862cba68cb369cc","sha1":"56d54bea22c25a2d43176ca784f3b0e8561e9be0","sha256":"d1abda5be2eca6511387d52e50be65c444b1e39cd5451d9fb601ad28424e3761","sha512":"23e769c4ea1911a0f0d77a0932d769c2a9e3ddfc4f71451b904338962b3310be4f3a36964fa4c31ffc98aa19f06e3e8a82226a640a1f4f222cecd5080ab0e4c7","ssdeep":"","tlshash":"fe01f47b75886af1fc0ee335621808773eb13f9af567c00109d12e40720b811871d29a","first_seen":"2023-06-07T09:48:40Z","last_seen":"2026-07-24T06:14:46.322674Z","times_seen":419,"resource_available":false,"data":null}},"time_used":1640,"timings":{"blocked":1223,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/property-6708c68b.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-4547\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MkWIJ9ZFsTimbEU%2B%2FqGsnBpRqMz0AzL7AKDKfscoC7BZQKekHQS08Yv5RV2agQUuMKL2fWclp%2Br77pveo6fbOORqQ6J%2BCcphjaJgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfaaba47a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-07-01T21:00:47.804729Z","times_seen":28,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/home-f7f6e3ca.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/home-f7f6e3ca.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-58f3\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7lHR6EoyieeZbc0WhE%2FiGv%2FrSP4Oj9Hc8pJ%2B5AdI77uS5ASm%2BKr6c5UuWbuAyToPXERX0%2FbXwh5eQpuUeLKMuYfk5EtHY1B2f4Uhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa258bca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22771,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"bc181fed22e1167ff09eb3cfbd4736e4","sha1":"22f69fd504bd84065f2258a483ce60c214c6aad4","sha256":"d7ea5e8ecff85d0b64602d9eda14893bdeda7a452276d7cdcc4d3f2c298aac72","sha512":"5f15549489d9579364a61153a705ef896aff88a6d9b628dfb07a057c15772d60bc8b55144d6b62fd659f3a788abd41e5b6aaf33826d7b24606507eef9e462fe1","ssdeep":"384:+yqoCYg+Z0YKJmYyoLD6pS2L86DaiEkR64Q/Or3RL3C38cu9INSQa6MjDX4syEp2:7Tu+Z0YKUF+6pL86aeRu/Or3dC38cuij","tlshash":"dca2ead9fd0ada3eb5f209944598000135141feee52181d1b4fd1e1a1bebe7e13afb2a","first_seen":"2026-02-04T16:46:53.786814Z","last_seen":"2026-05-31T17:09:56.240705Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-3e85285e.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-3e85285e.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-628\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jktokS2fIv4o0H%2BZf57mF2MpkRaf5o5F7EHp5XtLiTwT7K0mpe7MNAu2deakfCbL3rCq2GMs3IIOksGwygd46LFWSF1ZaS%2B9IdkxhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa45922a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1576,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (527)","md5":"2f8c56a2cb3b200fe8b27f3d79ae2328","sha1":"904db870c3c853c0d13c8865bd2c6e01ec0d309b","sha256":"8821da40ffdc0c60adb14f1499e72e0cbdd7c69658bec283d256161651e6fd77","sha512":"9342bc44af0810b2b9d51299809fbf87993c4501e3c3f088dd9c14511583728da5f52a2f19b0e55377a9c48475f0b4be94efb05161c509346ab4128b83faf9de","ssdeep":"","tlshash":"f2317389637a24a824a3d0e50269da601235642aa21fca6cf2fe71f58fad4c4653b712","first_seen":"2026-02-04T16:46:53.881136Z","last_seen":"2026-05-31T17:09:56.215779Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-d51bd663.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-d51bd663.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-12eb\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jr%2Bfe06wpWwD2yj%2BRaFgXW7IANvk%2BBjCPGFPm9znNrjxwQy7x3RuZfaUgHDTkfRxzrbWrgcM6KciwaLB8QXXCdbbDf%2B0GrMeGqh4xQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5e994a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2981)","md5":"a19607a0e1b15c69b360cba28b08cd0f","sha1":"375edb41e0cf4bba33779cd2c2de454f2f344556","sha256":"58612615012da8292e218083b3448403718f884ead7f3e3d7ab933e0e9ca2eb6","sha512":"9712a82dcc42d3301c97fab1f6f2a859ff8891a5493b9a2b1de694a8ce298cd6d5d6f781a2dbc52448b9a0cc2d29a28254e9fcf556ea7a3ae62b7ae3955f330c","ssdeep":"96:GRhHliZPsXSAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqV:GRhHliZqZfRKl0ZKdmj2xRf1gSMipiaj","tlshash":"58a1b6f775a7e7e0951787b1ccf73811611b3cb6bb064e0aa58caac8de16184868ce10","first_seen":"2026-02-04T16:46:53.906874Z","last_seen":"2026-05-31T17:09:56.251977Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-39a44663.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-39a44663.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-42e1\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2I4hi4dGZsWTghYHyAObObJEM3YCeMT41nrOAm6V%2B%2FyoOuauuBvFsM35ZqCNWQ44nPZ6mLQ%2FU3SKXpkdXzivLFGeK%2Fqmv%2BX2Ej44cA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f99aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5657)","md5":"9c4095365d93ce99d59a0bbcfb3571af","sha1":"b2027d2c10d0d6869941bdf15408ec5205da8a5e","sha256":"6fb8abd2e0f29cef2c80e3c88744a5ef247b524fa717637f281eea31367165cc","sha512":"89ef5965c4910b6862b3f2229173b5e927d74ea4c65390e830d7fe8b039b7dfc15fdfbae6c3c2a63a5892935ac3911ff579812086818732980fecbbc3d75be03","ssdeep":"192:/BhoVeVACS5TATMISkYkgHHGTAc3siTCa9QBFsqHRx3d+ReJibZdTAHJa8aTAHmA:/0VeVkoMIIbMnsi4JizKJqKYx2","tlshash":"2572b7ac3693bb28a9875bec26f55150f6343812442ed5bdb6dcc3e28f16a844cb2371","first_seen":"2026-02-04T16:46:53.890002Z","last_seen":"2026-05-31T17:09:56.279518Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/css/index-64018b0e.css","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/css/index-64018b0e.css HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: \"697bc72e-108e\"\r\nexpires: Wed, 18 Feb 2026 15:00:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 37064\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DADDInuGcePdQSYt8ANMaRAMu645nnjtH8GPTh3RlpKu7kJLzEdfmRHvJG3YL2zI4nuQX%2BWGN2kdJIc4IMZOGb8pkFzQk7Lg8oBXag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa248b8a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4238,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4237)","md5":"3c684af8b172bbf98c9863dd2dc7db9d","sha1":"f4d6852ce2e2c7aaecb3b7adf9307a836822b2b2","sha256":"64018b0e7980220a7dab8725807c61cddc279c9cd2b2b99e52b8a30dd18ea7de","sha512":"fbd99a64c8fd263ac3484229eddce1ccf7a6627eae44f99318d0588132f8eeb196487a4b97de590f591991becd18e48e46b64302bdbf73e22930ab479dd539cc","ssdeep":"48:FlF1D0mm2g1lMQE2imldovbJevkdFGVRIR8/FsvrS5eR6YShFQCGvRjVjmrT3xYj:7t5dFS24F3526Y1CQ7jgThYcfhKn","tlshash":"1591cc3bb18df6086077db91f3d17688925de523a2c569fa540c286dcfc3e8127b1369","first_seen":"2025-12-10T07:39:13.865038Z","last_seen":"2026-07-24T05:40:16.112977Z","times_seen":52,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/purify.es-ee0e7e34.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-559f\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BAWi1Vs6dUKNdx%2B9U%2BMzM73evocErcgARFQJq5PDwueGeuABnlxO%2FYamQ6a%2B%2FKmOopt5f5nn7xpj2DovKVB9CA%2Fk3CBXiZIaJxD2aQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa268c8a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-07-24T05:40:16.112458Z","times_seen":52,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/w3m-modal-a765f42e.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/w3m-modal-a765f42e.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-b44f\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEwzNlYJI3qxmYPhYzMEzsdJfsMtPXYKWrijdUZfF2V79evhC5VfeniebRTLwdu%2FSRnbHdBNoSoBGXQjlUQaIDS2tuDSuWw%2BQ6iqgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4a951a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"0df863094f3b0bc7e0aaf07ad50f8713","sha1":"5ab7e58bf80229212abafab63a7cd97d8be6f267","sha256":"888071f2384a181ee67fa2822645407e7cd5a1ff53892c77b9915522d0094808","sha512":"f9b68939b77369fff7d07461e333bd086e463fd5399110f6f4b0060c99e726c57712033e4c690f0b7c635192bb4e0eb84f8bbc297ed771d37f46725badc8e797","ssdeep":"768:DWEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:wCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"6d2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec52d58fd498869bf735","first_seen":"2026-02-04T16:46:53.879627Z","last_seen":"2026-05-31T17:09:56.231128Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-a147cb61.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-a147cb61.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-38263\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I0Yk4qkP%2FC9DWIKuddukHL%2BFfCd0RGXJ3QCMRbReRbIEQ4593F7Ict8aKLg3AcsudAq6QorWNQm1xa%2BPGk7MxCKs64OdaqwRWo%2FrSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4e95ca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"909a97120c66fa075b925f65a92fa6c0","sha1":"89842ccb9918db72cac69e7fc4d9e14d5ca82bd3","sha256":"2bc3bdaca275aed8e5d78c82d9df75246d63f67efd0e2214ddf3a33f25116f05","sha512":"f1695a90f4b9bdb9143b06f302686264704e27ede117c7fa86df0aee6403f7e66c67d2935c05863e813a66b7c9e3420f2011ad73d12bf8f2f0506491ac3372a5","ssdeep":"3072:i5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:viZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"3c24f8546bb06d186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-02-04T16:46:53.826072Z","last_seen":"2026-05-31T17:09:56.259861Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/v1/api/exchange/getSymbolConfig","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7euOUBZxdCWPhQ7qSbuy9pFgqepcKMRqG9lwLHr2%2FAysSaKWgPArrEJDTl3kr7YAQvvhnxl8TirYGQxlMO9WfB5pD4PJTDrqvxEUNw%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdcfa50960a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dc972f8cd5455e34e8fbe26ed8a38ab9","sha1":"7780d3b307ee69774c2fb62fdd7b2781b94c831b","sha256":"1e3f06bf1ab9d8a072682253b03d4a5f20b228504bbe7c0e5434ec9c499aed7b","sha512":"a684f750d5d5e3beaec1a0d8d1ad4558acbcdd1bfd16358cbd0f0eb16f97f54eb4d078a72f98383743b99a8d9a3a70d5681f609df021ff220002c7cdb513bf30","ssdeep":"96:DlxyJKeU+CbFt3zASylpjIA5SVpzFa9LD0Ey2PHP1ql900BYf8+gVjtEzGj3UD/l:Dgmb4Sgs1h+v02fNy9hJ+YwIUNZiIkra","tlshash":"12f1e84527715bafc520a1c21cd23bdc592f61a22cc61b82a1ff9e9e8304cee3523727","first_seen":"2026-02-18T13:19:04.015091Z","last_seen":"2026-02-18T13:19:04.015091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e1b9a5f8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e1b9a5f8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bb2\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyif4nRaCeZYNnFabg%2F0xKusY5Kar%2B3AipHJUQAKi52SkaTmHPUwMTaSTJKmvalv6NbgbgGPjv4a4WPsY%2Fsp6eX8BeZM%2BNYKQzJHqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5d985a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (575)","md5":"0c3f1e3d66becdbf876d67407987f2dc","sha1":"b6efd3fb79b3e5146f2b59a995d20aa0b8784781","sha256":"b66e09020f350c9823f77bf751c7baba3919c405a5136ec51f11feb7b18f2422","sha512":"c98d93e492cd661f7d762c6a5aa78a9d825caed0d31431dc6017046e0f58131f6ba749a9a484b34e839df79d4bc41313627bcc56c0fa74fd6ef77a1aa24a7e98","ssdeep":"","tlshash":"1f510dd1ffa8a26ab70bc1bd145ad910e333f00540295f7f7bca12f14f5d684241eaa4","first_seen":"2026-02-04T16:46:53.82164Z","last_seen":"2026-05-31T17:09:56.234828Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/sui.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/sui.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0q9M0GFBfT/sUVFF1Ng8DLvyDR/v6LIOZN5mfj3sHlztxGcDsG1dZvQm8iV2uEGFWuzQ+n/e1QzEKfD/GLcDwCBkoOOeq4Ch\r\nx-amz-request-id: 6R0E2NTSBEZJVW0C\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Wed, 03 May 2023 02:12:27 GMT\r\nETag: \"4ecd0b491a611abad73010840bc6cfff\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1547\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ecd0b491a611abad73010840bc6cfff","sha1":"b8067340a437daa9fcf8bac9e718d5955e3049ac","sha256":"7c02270653440d5120b208cd79c2778ebe629b3d3528df0c61cbfa00b97a43a2","sha512":"b307646522b4518266e8960820e34eea4c4a27fa230f69ad0bd0b2b15b330fcf03500654e1913303a62ba7d5378a000329b6c08d31428854dac293aa00c9afd7","ssdeep":"","tlshash":"be3123ad279df57a8400eb38824b14703ad37cd66b05d43c67f42e5ada1905f26a168b","first_seen":"2024-04-28T20:00:28Z","last_seen":"2026-07-24T06:14:46.39612Z","times_seen":146,"resource_available":false,"data":null}},"time_used":1997,"timings":{"blocked":798,"dns":0,"connect":383,"send":0,"wait":419,"receive":1,"ssl":393},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e1f7db2a.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e1f7db2a.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-814c\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w07lKjaQ6SzuGedAliYz9oeGIkszpAlsZJrOBamQIIELXHrssImvfp7QiuBLGPjcA9xxlX600aUzolDCz%2FkqabH2Vmaap1SDLP6JwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4793aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33100,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13692)","md5":"1a1219d53a3a4b710eaf1c87840337bd","sha1":"d09d5123379f46bf1681039eea03d6965b3a7f3f","sha256":"b9d3e7f5b216275240b008eada5d7ea3e0965ff73888bd7db184aabf4abd5533","sha512":"3e570fc42cd8c4a2ba58460cc3cf0e8003ceb7d3ea3cb5f4cd483275cb3c7dc1a61edeab5d10e85186546a0d4fb0e941816d3bc13b88682dc2537f5142a62301","ssdeep":"768:OOzlkEh6WjzDJ/NCYUH6Xi5QMR+gXPLjNHA7DGlM4+DBL+FUytQLUeD:Dzl5h6kwHiipRFTjNHA3GlL+lKFDCp","tlshash":"fae2f8c479d3b11e6767e1a8156f4900e23a8803951ddc3dfaec92d35f64e8884bbbb4","first_seen":"2026-02-04T16:46:53.770496Z","last_seen":"2026-05-31T17:09:56.314919Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e49b3847.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e49b3847.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-4f6\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2FuabC8YolYK6a4M6G%2F7JXChv9hIBaGDj5a3Nfxx7thev8cMWatIj%2F7v52AvCMj8HmW%2FbJ1J2pCwx18lTDp2mB1d%2BxgF6n9tqMt4jQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5d987a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"d0c0db380a45c9e6d064f13680d8a6a4","sha1":"59923bc02b8b720b31e7add2c4065dcfcc4bb9ed","sha256":"c0477de54e30e97c8ce95f96b922ed1c7b198efa117df59c9a91e3cafedbfd9c","sha512":"1645ae0cee632dd55d1365ee39c8e4430d284ea1c9e37f7c2f9c941d8957e0c538f1f18223aabe50360d59d34ede5f9d9718fe66a8b819f60dd15e18834e1201","ssdeep":"","tlshash":"1d21878417fb729475576188463c4b02d2324053aa1ccf3db3ad76e88f8c1c988bb725","first_seen":"2026-02-04T16:46:53.815492Z","last_seen":"2026-05-31T17:09:56.231941Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-bc8c8fdc.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-bc8c8fdc.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bcf\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3KXjFH%2BUQDX15hlUN2Xvyz8TxsNcspFK%2FyzAKiWRdPzt9kgDhTZvEC%2FCDryuD5KBWamH5pqImJKNp43eBqaaaDE1s9HGpOG%2BxQWLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f99ba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"5062afef6ca30ae3b81acfdbd0a60979","sha1":"9977f463a922b994dfa091f10666cf45ec2224c7","sha256":"b03c93c30f2003764dafafd83df6d0aa83bed9f5609d8d0a3af3db3da80f90c9","sha512":"fc2216e68d6dbc4affaa01076ca3ebf30198b3dbf7f1bf500bd7766fe63539376e307959661127c4092009b4e0145b305d95352688ddc71edbd7520426572a72","ssdeep":"","tlshash":"c551a7d7b33a12763851d2945eae5ee05222e01ba11dde3ebbce61e84f461851c36632","first_seen":"2026-02-04T16:46:53.783617Z","last_seen":"2026-05-31T17:09:56.192135Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-cd74709b.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-cd74709b.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-568\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DH7qenOPCUKwx1k9ewFZhoFm1vqmFgueNPSO0FP3W4vr8KPz%2F2qJXVJHHq3es5mZdlQrkhOvpDitBIPpmAPa4R31%2Fv08h%2Btru7EpBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa609a4a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"0fc74c900be93cca0373939467165043","sha1":"f2bb471fb224a0187844bd7cb409041a2535a6df","sha256":"54963202a423af8bbdd469ae49041855a08168972d6c49ef9a743b87a202bb40","sha512":"2f89be6b4d72668f91848e4f4415028e8c853132f3cbaa537129df8d3c6577dddc6bfda9ee467dc9a6b4faa2da63cb6e18d971e360c0c0e25660ae2dce336fc1","ssdeep":"","tlshash":"fe2136891679d7f105859594c6e9ad014125051bcf28d091b3cce1dd4f5ddc4c6b5b33","first_seen":"2026-02-04T16:46:53.816872Z","last_seen":"2026-05-31T17:09:56.230373Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/eth.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/eth.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: v90eYhnfKR0JHk6QUKXMqM//cmjuvcYMSCHqd9VF6LBr/jDsj+cWBqhq8cV1M69wCRYKDLIG+h8iKIMyd/Z30LhIXPtMWxXJ\r\nx-amz-request-id: 6R0E7EW14YENR9ZY\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Wed, 23 Nov 2022 07:24:47 GMT\r\nETag: \"d8a57c2396575a058eb68a6c0e32caef\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 616\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-24T06:14:46.359237Z","times_seen":544,"resource_available":false,"data":null}},"time_used":1568,"timings":{"blocked":633,"dns":24,"connect":279,"send":0,"wait":305,"receive":0,"ssl":325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/VerticalTickers-27d43059.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/VerticalTickers-27d43059.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-59ea\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LsYdfpllub7BBFWjBMPMEqyGJyiHBXy5e9vRieBNeolDRlatTnECorUpIGZmaYZ8COCuZyRXKE6%2BzT7MvcJi5nkOYb%2B07JeViaYRlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa2e8e2a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"2687eabedc7fc188220cf3e6c07e9fb5","sha1":"2dea3b1a92a4d4347e3056712c24a155ec9a4339","sha256":"b930374e092c6a5e7ea35a5d7e3051a48e29248638c7d342f2c920624cd915d9","sha512":"ccfa8fc5d41e3b29a40d1400eabac15f8ab84a48423485960ac0563a3a95d66d44bb3947c88a5fd7d0adcccdb053bc1138bc01f039ef8285d3a6bcd26f0015c2","ssdeep":"384:iy589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:T+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"a3a2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb55d25f7fa9","first_seen":"2026-02-04T16:46:53.834941Z","last_seen":"2026-05-31T17:09:56.31322Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/HelpersUtil-27422063.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/HelpersUtil-27422063.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c7c\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfpNfFyMiOacYwTqQzW25I%2BiJi1WVITJImHHoiGt0dG%2B%2BXJba6d2fbuOTnJKeJKKbJ7Hw%2FC4XwyBp83EOu8EehKkaPVISguI4ld%2BjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa47933a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"e13300ed30fa2ed75a21c822dc160299","sha1":"7814252007c1a087119f9f2f2851089efd7d92f7","sha256":"f733d9e7e1e6c6d662fdf212241ccedde3ffe337a0aabddc1e2dd16289f1324e","sha512":"02d2694a91315066409253e528628dd6403e653c087379aaeb4e23e6116c4317d34f0ca38a996d01cf8e323e46ba7bb471898b732883a349e996f1dd25f56ea1","ssdeep":"","tlshash":"746145d9f3fe7e26350704a8996d85106336702a291e9f3e7bed53f84f0afc1a856520","first_seen":"2026-02-04T16:46:53.77705Z","last_seen":"2026-05-31T17:09:56.257853Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-41281e13.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-41281e13.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-f7e\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7DaFvBT1DPD69AQVw60BnXpmVFo6%2BoC74Z1XBfyUak%2F91eYsxkwLojqw4MUQ0MpeU7UI0fnnQi36vobSS%2Fgv9A%2F%2Bo1pqBTHA%2F7jc5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4893fa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"435ca00c4f345dbcb554c9ae1f29a53b","sha1":"5136cb478d1dc98a99199e1f5128e0eaf8ccb437","sha256":"f2736697b8e3a0873e3b73ff8b49541b3f6b9f3cb589b98f1203776061152c54","sha512":"b5daea056d99d452cff95399e238e6f4a5b868aaf50518cc0c54db5be7313867d12319bd233b701e4b32b3b3b2476bdded612d92521d2cc3d35dd27dcb57b82f","ssdeep":"","tlshash":"7581979ab6771864342b4264fbde4b245231b05e0a1bdd75f3cc12d58f48aa89b4b231","first_seen":"2026-02-04T16:46:53.763426Z","last_seen":"2026-05-31T17:09:56.2171Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/w3m-modal-a765f42e.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/w3m-modal-a765f42e.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-b44f\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UriJYkO7nC9el1OhoTKAIQSwccpIxjjbYAPLudu4Y06d0jn%2BvggRRP3ELuUdkjxDhj%2FJJgqGsZKA2IoeRg%2FauM%2Ft4Rg%2F9ocSqBqvmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4e95da106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46159,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3576)","md5":"0df863094f3b0bc7e0aaf07ad50f8713","sha1":"5ab7e58bf80229212abafab63a7cd97d8be6f267","sha256":"888071f2384a181ee67fa2822645407e7cd5a1ff53892c77b9915522d0094808","sha512":"f9b68939b77369fff7d07461e333bd086e463fd5399110f6f4b0060c99e726c57712033e4c690f0b7c635192bb4e0eb84f8bbc297ed771d37f46725badc8e797","ssdeep":"768:DWEQndixZndRZMtIGndRk2NpGBo7ndRmK1nYurchrDndR7tJ2nkndh7kKndbUGT9:wCZqn/2o7TnYurchrDTokvmGTCoSkhCs","tlshash":"6d2309447bb724692543c298aeeb4a10d230d00b542ecdfebbec52d58fd498869bf735","first_seen":"2026-02-04T16:46:53.879627Z","last_seen":"2026-05-31T17:09:56.231128Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-7b62a5ba.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-7b62a5ba.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bc7\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSfRbITTkmDvSj16fNuSJEzCePPKviei9pYjTzy3Innb14FzW3iAmZ6gdK5eRKEiMtmj8D1J217nGzaDioLEBHwYvE%2By5SnnzwxRMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5d98ba106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (602)","md5":"55de4531b10d61783e873c98c4180a60","sha1":"246e52e69588c3d6812352adb23a0d0f9d14a5a1","sha256":"b26da8ce31d9123427739c7c6ef85c819e84a58b0941a18467b47e687f9a226a","sha512":"a9072e0a7ed3b8e5e1fc3b1d6eeac063779a42e3e56ea419ebbcd15d1f74ef45691e5018ba780e5d2e076ca0130108ff41e95ed8c8bcd26e71b2dfc790836a20","ssdeep":"","tlshash":"1a511088bfb43d63371bc065f0ae8521e335a03a982c9e3e739d52f84f59682555da32","first_seen":"2026-02-04T16:46:53.869137Z","last_seen":"2026-05-31T17:09:56.24937Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/ebac7b39-688c-41e3-7912-a4fefba74600?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1992\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa98f6fb28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 73286\r\ncache-control: public, max-age=31536000\r\netag: \"cfctNhB4Bi9Sx1OSjZpNEcxaPsfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=9+6 c=2+3 v=2026.2.8 l=1992 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4b013764d1cd40ca1e78cac87007ed2c","sha1":"55fd79cc74b5e19798e4ef08327914446bec62ab","sha256":"14abbbc1a69d2de80f758bc1dd392c9bb98e884193033ecadd6177e07b552f8e","sha512":"a06b598a53e2ccca0e93c46c2865d2e0f4e948fbdbb655a2ec12c5700fb70971368098f8ad172003f10ccdc7a94930fb7cd8e7ad61b9f849181a8de2ac42011e","ssdeep":"","tlshash":"06410a3883863b94ae5eb9ec6f81001b82791e76621d8483d93664cf8f21f864f8f851","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-07-24T04:20:43.739697Z","times_seen":611,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e569eff5.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e569eff5.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c1d\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZyPy24l4oaatsLpgXt5HfsivvLFEs6MhlyUoUYVOUaNQIeaEiEaWhFIlxe5MAc94bg%2FKGZthlUKmQgbJL16V7BTbNou3ugNQIDZrCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa258c3a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3066)","md5":"2562ceb798d177b66d9395e2981f7dd2","sha1":"8e0baadcbe7a13cc8813ffec842d9190246da0dc","sha256":"a8209a3eca8c528ad27217f5ede68eef9d79d86ec234a06fabdd18c0df83e17a","sha512":"b9be842f73d2cd40c2b1e4d7e85867f104662899836ec5e1c5fd111160e5a62032b748e48abeae5bc98aca8d37781d0ba8329336853f3703b8b31a90b84d6983","ssdeep":"","tlshash":"c1518221f042ae3cf3b750652098780865410fa899646af7b1ae5e0f23d9d726b9f738","first_seen":"2026-02-04T16:46:53.776329Z","last_seen":"2026-05-31T17:09:56.335162Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-67b7a897.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-67b7a897.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1008\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UuA7RJqOGMphCBzC3665jcA5dsLzU1BaeSi1mZii68TyKctEp4d5UbvD%2F0eVtgm9mkTAamH2MGpE37szNVQmqDWDsKBizssz1TTJow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5d98aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"268c1995b05e1bf61c373f51b9d419d3","sha1":"9a97e9cd5fddfb1dcae873dab8cd3e9cc56f7305","sha256":"e40ca7f06810fbf4384fe5e760a7a391b415dba025c06e1499bae9476dfe4b94","sha512":"bf57627fe27862a3d0adc97e82f2fa8148991dd628a23870c14c10e00e5811715c74c761f15994ac535c7806bd123f4a7d338d6f46cc8d06730269b5062df4af","ssdeep":"96:1JvHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1tHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"0281c5897330d952151a8a6467fb8202373a50274226c4fcb6cd9af84fffe459b75b70","first_seen":"2026-02-04T16:46:53.808553Z","last_seen":"2026-05-31T17:09:56.199585Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/v1/api/exchange/getSymbolConfig","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /v1/api/exchange/getSymbolConfig HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8wC6e2jpDmjgrZRJPpx7QZDer3OMFktaR2Nlb%2Bfe7%2FugnLUryUVMVaOTT%2FwDsrel%2BC0dYnQGKzB6ltT0okR0FUztPJqnofdpNhhSg%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdcfa5f99ca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7831,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dc972f8cd5455e34e8fbe26ed8a38ab9","sha1":"7780d3b307ee69774c2fb62fdd7b2781b94c831b","sha256":"1e3f06bf1ab9d8a072682253b03d4a5f20b228504bbe7c0e5434ec9c499aed7b","sha512":"a684f750d5d5e3beaec1a0d8d1ad4558acbcdd1bfd16358cbd0f0eb16f97f54eb4d078a72f98383743b99a8d9a3a70d5681f609df021ff220002c7cdb513bf30","ssdeep":"96:DlxyJKeU+CbFt3zASylpjIA5SVpzFa9LD0Ey2PHP1ql900BYf8+gVjtEzGj3UD/l:Dgmb4Sgs1h+v02fNy9hJ+YwIUNZiIkra","tlshash":"12f1e84527715bafc520a1c21cd23bdc592f61a22cc61b82a1ff9e9e8304cee3523727","first_seen":"2026-02-18T13:19:04.015091Z","last_seen":"2026-02-18T13:19:04.015091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /public/getAssetImage/93564157-2e8e-4ce7-81df-b264dbee9b00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2928\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa7be61b28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34631\r\ncache-control: public, max-age=31536000\r\netag: \"cf1ApOabfxxTRxuFHP4nttwOIZfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=549+3 c=0+3 v=2026.2.8 l=2928 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2928,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"711c83f0ff80e88da04dceb9118e6344","sha1":"e7c16915f94a38414525a2acd2929a3efbfe3e0d","sha256":"c3c7fd42c1cae833f4f4732829cf156ef9064b51df3753e0304e246cf904cc14","sha512":"597dd1ea582622aa1e30366c988851df60ab9b1372c55a4850312f05a656baa44ab0b458614de66a5c261ffe220d13f948d724a203079d3f0ef3f3a56c47120d","ssdeep":"","tlshash":"c8515c34138a1640d35f254be39993112252ee4f6705d217be47cc8e3ab943da662d2a","first_seen":"2024-07-07T11:58:42Z","last_seen":"2026-07-23T10:00:42.443568Z","times_seen":1402,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1318\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa98f68b28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 41814\r\ncache-control: public, max-age=31536000\r\netag: \"cfVAcZ3w6iX14DvHKhBFs4CgkyfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=646+7 c=3+4 v=2026.2.8 l=1318 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-07-24T04:20:43.714323Z","times_seen":640,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/css/index-3cd34980.css","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/css/index-3cd34980.css HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: \"697bc72e-6bb\"\r\nexpires: Wed, 18 Feb 2026 15:00:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 37064\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYeIUzEd9Nh%2BtSkUO3HxLjeDDzToo%2Fuxyc4dmmwvszsm%2FyaIGIYbGDtT3HPuPNn%2FSWOf8vbzSsvXEDD3%2FCEIgn5MZjuGMqg8rb7uGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa238b0a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1723,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1722)","md5":"8954e8e993c0cb85e470210a616216fd","sha1":"f7c0e384e8782c24e248cc13b4b9bd2394e779d0","sha256":"3cd349806396c6cbd9d6d50d68e9c265823560f0e9402ac67009406e9dd034f6","sha512":"83edd994300f5877052174f1ad511ad9e75d0d86d510478316925da888a7ccaeab1b53e15d0635be48422bb28dc41439b3374aef940c54d25fea70442669b41b","ssdeep":"","tlshash":"2431252ef6e063385e3e697057da1dd4e33e84208d629094fd62e424cac76b202729e6","first_seen":"2025-12-10T07:39:13.890273Z","last_seen":"2026-07-24T05:40:16.103095Z","times_seen":48,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/VerticalTickers-27d43059.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/VerticalTickers-27d43059.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-59ea\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kk11wNOZ2aYmV1cfFJQYY4WfqyLlnq8E5OsoDowgApKsIf6Nbs2guZRowmnxY3n6UBuFWS4IF7zACpnBSWhDKOjEXxVcGOibhi1SaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa258c0a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23017)","md5":"2687eabedc7fc188220cf3e6c07e9fb5","sha1":"2dea3b1a92a4d4347e3056712c24a155ec9a4339","sha256":"b930374e092c6a5e7ea35a5d7e3051a48e29248638c7d342f2c920624cd915d9","sha512":"ccfa8fc5d41e3b29a40d1400eabac15f8ab84a48423485960ac0563a3a95d66d44bb3947c88a5fd7d0adcccdb053bc1138bc01f039ef8285d3a6bcd26f0015c2","ssdeep":"384:iy589XmCN1XZHTA0g0ut32kok7uFlpqBBwrkeXFWiorFl1kBXziyjj56o2tKWpGo:T+9Xm8XZHTA09ut32kokglpqBBwfXFWL","tlshash":"a3a2fbb47086703743f009e080ba0407f2195a52785ad8c5f29ddcebadbb55d25f7fa9","first_seen":"2026-02-04T16:46:53.834941Z","last_seen":"2026-05-31T17:09:56.31322Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-67b7a897.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-67b7a897.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1008\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FkG4CJAP1%2BYiYCf85BKUd5nLRhXDBz7iwdJTCTM28PAidN1A4Eo8Ybo2l41Z%2FOYoEAWd22s2CdjI7WXucLuZcJ38hf0QKG9oAG8MHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4391ca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"268c1995b05e1bf61c373f51b9d419d3","sha1":"9a97e9cd5fddfb1dcae873dab8cd3e9cc56f7305","sha256":"e40ca7f06810fbf4384fe5e760a7a391b415dba025c06e1499bae9476dfe4b94","sha512":"bf57627fe27862a3d0adc97e82f2fa8148991dd628a23870c14c10e00e5811715c74c761f15994ac535c7806bd123f4a7d338d6f46cc8d06730269b5062df4af","ssdeep":"96:1JvHm4JfQEKYCrDWY/PwX+ohYGsWhbszm+LSVew0gQVQ3PJU:1tHxNKYCSY/YdzQZw0gQVQ3Pm","tlshash":"0281c5897330d952151a8a6467fb8202373a50274226c4fcb6cd9af84fffe459b75b70","first_seen":"2026-02-04T16:46:53.808553Z","last_seen":"2026-05-31T17:09:56.199585Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fe82323f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-fe82323f.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-593\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2tuKJtX7B2gsgbx6LyJAQ%2FAZL%2FCctwIYPsRu7D69%2BK3TcpY%2F2fC1IcGZ9A%2FwsvAoLwlaU7GxyZK2aqE36AoSxfK2k%2FG%2FonIL64iFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa609a7a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"669e102e9270a19254b328309b7bd79b","sha1":"9065048ce1d9bd81c1f14b5b3ee823b1a67ee7e9","sha256":"3943b950c4e04f14f4a73d99c9dcbad0cc9b95a53af9cad067ca307f23c67a84","sha512":"dc1c963969f4c12f7985c870f95e517dd34d8a240a7e571c3c48ae2a897fcedde8b19edc58ba8f8d287c430c23563d0b13adc8bfbab046bfd8d0aa0534c17b98","ssdeep":"","tlshash":"6821a5ca277acaf089614075cf25300132376003932fda85b6de79b48f0c1c5866a7be","first_seen":"2026-02-04T16:46:53.831665Z","last_seen":"2026-05-31T17:09:56.217679Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 00:15:03 GMT","end":"Fri, 08 May 2026 01:14:56 GMT"},"fingerprint":{"sha1":"45:9E:64:A7:5F:5D:4A:08:84:41:1C:19:61:0C:8E:F9:07:F9:39:0A","sha256":"BE:61:71:F6:DB:D0:2F:10:BE:6D:F9:49:68:D6:02:00:7F:0F:E6:E2:EA:25:7E:B2:B4:99:56:B9:98:A3:C0:13"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/font-woff\r\ncache-control: public, max-age=31536000, immutable\r\nage: 2933\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nvary: Origin, Accept-Encoding\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\netag: W/\"944c37658ddfd015ec2d26ace1d57e62\"\r\ncontent-encoding: br\r\ncf-ray: 9cfdcfa778ae48d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51936,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 51936, version 0.0","md5":"944c37658ddfd015ec2d26ace1d57e62","sha1":"b809229ab132914e716ab1b9863cfaf6696f14e5","sha256":"5a17138e7eb4cdebda94066b8081d3a6f5065bedede63136510877c5a8fd23db","sha512":"8a8cb3e83d9a0353c9ab77c4d40e879b24948abb5f170d1c66507cc2e07f3060d75e6d12829d1cd98d6164875c1080610fb71ca1b75bb559d294eae55741d6c9","ssdeep":"1536:yV/p2LNmMiTXr23hA/g0IRuEWNh5tUp/Coue:y6crGhKxEktaQe","tlshash":"c83302482c1b555343f3a6f21ea869e90f40914b776cef0e9d9ea9a6d0852f4c31c3b7","first_seen":"2025-09-26T22:05:13.143105Z","last_seen":"2026-07-24T06:52:07.9649Z","times_seen":644,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/id.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/id.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: eKnBV4/4xu0Y7qta5+rt6sU4u2mwbqRjt43Sh3aoN7Iq2OgtJ1GfWlcTEBFbyEJkYfaswTkUVWBo8f4jJ1lHgs1QKo1PgGM7\r\nx-amz-request-id: 6R0CM9MH7FKQJFGS\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 01 Aug 2023 12:19:18 GMT\r\nETag: \"814f626fa5df0816a76957898ab17546\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 66185\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":66185,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"814f626fa5df0816a76957898ab17546","sha1":"5fe40d5015ddd6555acfa862e868247c8636c858","sha256":"16c5691b1435c4f30f2a171870789b914983963f2b84a4e225e08e6ec11d16d9","sha512":"4e89a4240e47fd80f3b00fc08589f79c6c60ad797371024f769728db2681f82aa1c8d61bcb1bb1ac3b26ad8952608589d4eb3ee98a29e2c684bdab6a9b7d1477","ssdeep":"1536:rERrqlUBeQM7hGVseI91rW4Fws/2iNeO0A6oVI:rE8vB8VsFrW4FwG/oO0W2","tlshash":"0353cfc39f979f67454ee30e694d604d2d1cb9f3baa260986e8d8d83b44a8443e061f7","first_seen":"2025-07-05T16:42:06.921322Z","last_seen":"2026-07-24T06:14:46.413988Z","times_seen":82,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":1067,"dns":0,"connect":0,"send":0,"wait":299,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-2886c057.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-2886c057.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-7477\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zr429B8j17VeQHGl6Pf9KcC8b7Y8K57Tai8ONoO9m9dTZmhK11A07hm%2F11m1HOj1wdCyC%2B8gixn7LvS7Gnrgs1b4eMW1CS7QFFwiWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4692ca106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8115)","md5":"4ca9002140204d97de00ebe56e01e19b","sha1":"456642a96418b326d0f6771d2e42b3ce334eb6dd","sha256":"716bc7005c8ff7f6fbb9110b1e069f351d35b425d53a25a7184a62f22dd2b2b2","sha512":"a46935cbb735226279523607023570d03eb72249792469f763f5faf086adf9ad45e91f2be3fcfd84065898c2417413affa2b9b648e5cdb8627476b65a963a725","ssdeep":"768:3nfSjm37DwkeHrb15TvnM2ooK9db2eL/lHtexE/vo5dQ5PRT8vILLbAw83C/CYAt:K6cT2Gxyysky3jty","tlshash":"11d2f8997292716b439351d5003f0405e2fea825342884a8fb4da8d37f79e6a94bbf2c","first_seen":"2026-02-04T16:46:53.851732Z","last_seen":"2026-05-31T17:09:56.20372Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/btc.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/btc.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: PQpfgOqRII2v0FJALIk4PlbH5/aRQ0klgUTIzDWwRUl51H+Y5N3/IWvi0PnuH/n942PuzK6qY74kuOQ1641UpSt8UAXZvkcQ\r\nx-amz-request-id: 6R0DRGF9HFF19KV0\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:37:53 GMT\r\nETag: \"03c74454bc971a3437d588396a5e610e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1947\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-07-24T06:14:46.288127Z","times_seen":521,"resource_available":false,"data":null}},"time_used":1552,"timings":{"blocked":630,"dns":23,"connect":277,"send":0,"wait":298,"receive":0,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/property-6708c68b.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/property-6708c68b.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/PhQuestion-25ab6f67.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-4547\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzGP8wG%2FwV37laDv1ezqpOwhqkJbZfd13gwGuPeyWuG%2FAyroD%2B0yS3aD%2BgSfWSspxnihiRLmNp6wtF8HtCGsyweGzgDMdxygzRH0OA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfab4a65a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6905)","md5":"62228209733c753f099ff3aa39c500f9","sha1":"132dac86a174e6f128ceb98a3b4f299ea1d4639a","sha256":"fd6b696720dc03630415469147d07ad0273932849aa1531b0c2014d60b5e800d","sha512":"fbcc2b165953f977bdf14be54f82db58722ca7d0bd346641165b7611b6ca0f3fb44d416ae422966633b4f603620c8c30fa70f0f9552464df9b7655bbbf625c91","ssdeep":"384:rG3xG/OaSLkOs3SdHzuKS5DbzGXSSo/ikSbK7bsZgo5X6:rG3k/OaSYOs3SdHzuKEDbzGiTSe7bsZG","tlshash":"d282b69432fa94721ae486d9dc76054ff2003068382d909cb67dadef6978e8270fdb75","first_seen":"2026-02-04T16:46:53.910958Z","last_seen":"2026-07-01T21:00:47.804729Z","times_seen":28,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-8d97d39f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-8d97d39f.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1b23\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lu%2BkAV%2FjYEO4sG2pDRPiZf%2FwPQWQz0fP7xaIJ%2Bu15yRDVRw8yBh9mXCvchHAsRwu464iL8ArJL4hTji60%2BBkdRNGJWvT%2BxgZsdDupA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa258c2a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"1a8256a5b1acc4ba17648b5138047595","sha1":"0f0ccbbdda839d3dea347f3419577415ad7066d4","sha256":"22e1c0792d38caee2d95d42830119d425014356177e30b2100fcb05cb2db5d88","sha512":"68bbc74532ffe0f3c9fb073e7257c90edaae84ec372f7e925d382f6c9b7ee5a5fba282973d8bc03e9cd27ee327c8ef83ca94df76471bacd226c068eb33d0d98b","ssdeep":"192:iDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:iDEIRRuUCL5dmVp","tlshash":"5ee1b601b929ae3cf73b84582406529161d09f59e630c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-02-04T16:46:53.812836Z","last_seen":"2026-05-31T17:09:56.248467Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/SwapController-128e9645.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/SwapController-128e9645.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-35f8\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFsMlGbPs6cucc3sFJo%2B6z1wIsAmH6CfLLc2A73JsBVQ2hlXnu5VMThB8qiiZuL7Gg1vZ8FQmlgY3xIJGX%2FccGJ1X3V0MecdSrweIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5e98fa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13816,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13815)","md5":"3a23b35cf6ca988ab9aeb279a1e26d12","sha1":"df30264fe8c72bd9e210c1383b04ee04fbdb50dc","sha256":"18e8384edc749aaca88551841f732f14a376ff18daf940109d10ec12732a839a","sha512":"4669d2966d2cfa8c2f924439adac24c805d28b2fea4d934f18b74b116803a1858ebdf05182eff503d4b22b98c99c799afc7bc9646c6d897575ec4425b0be68b8","ssdeep":"384:N40FT9J4FqzoWw8dkLmYG0hWE6RmZFuWALOhfsn:e0F5mFqz7w8dkLey6QGWALOhfs","tlshash":"c05263a27360b676471e729879f9131025221cd4e86eb4ece8ad05e30ff159f1aeb921","first_seen":"2026-02-04T16:46:53.875997Z","last_seen":"2026-05-31T17:09:56.212525Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/HelpersUtil-27422063.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/HelpersUtil-27422063.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c7c\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uywm8nZwtJ1Z%2FPFUkyqrd1bI7DrBu0ZJFTlwhH88BKBiqnGHwntyb1sr2PtrA127d4S2Xz4C0kDlbqBmrmuAUEeC%2BqU%2FC9ecPTny2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f997a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (771)","md5":"e13300ed30fa2ed75a21c822dc160299","sha1":"7814252007c1a087119f9f2f2851089efd7d92f7","sha256":"f733d9e7e1e6c6d662fdf212241ccedde3ffe337a0aabddc1e2dd16289f1324e","sha512":"02d2694a91315066409253e528628dd6403e653c087379aaeb4e23e6116c4317d34f0ca38a996d01cf8e323e46ba7bb471898b732883a349e996f1dd25f56ea1","ssdeep":"","tlshash":"746145d9f3fe7e26350704a8996d85106336702a291e9f3e7bed53f84f0afc1a856520","first_seen":"2026-02-04T16:46:53.77705Z","last_seen":"2026-05-31T17:09:56.257853Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ada.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ada.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: xKpR+gMfpsAeq+4ttf13DmtoZbd/P0byLKJdSkFSIc/8zA4oZaF5ZMTN+F+IG4SVjyIrIiwKlV0Jtn9NxG+k5LxubBVmEzRr\r\nx-amz-request-id: 6R0BKQPDEC8MZGSR\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:08:07 GMT\r\nETag: \"958ad0ab023fedd13301398a46f0ea98\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 6511\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"958ad0ab023fedd13301398a46f0ea98","sha1":"1f006086eb1afdeecc534e1f9990435502080c98","sha256":"2f91923ef20d262b5fc74abf33fdffb7888e7cbce646e0380122825cb872f410","sha512":"819afddd9ee026b64182974f5e80c349651953e593725109b1d723884f4bd463e83d8443a8a22ad1b9ed76dbff6456071d19c5ec2787b4673d9c7bc6da4389bc","ssdeep":"96:HEENXWNXq2E8vTAd/IOZVMa/zSdv/RPk9WUvykuM+Xw7zROT02yrnfqzE:jXW02ELNIOZSe2M+Xw7oPSqY","tlshash":"25d1735973faa3b8b001e7fe87a794617a4529e36912d574c3b60e00ea8503d4efa853","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-07-24T06:14:46.310488Z","times_seen":208,"resource_available":false,"data":null}},"time_used":1225,"timings":{"blocked":923,"dns":0,"connect":0,"send":0,"wait":300,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/mnt.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/mnt.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: p9AmPQro44/rFOUsQIwab+pg7HHVLEWEu8P3eaPks/1c7nmhMpBEuJ5o37yi68+tTI1JY/ERDQ9RG3y/nk17qUqQe7i3REAt\r\nx-amz-request-id: E4Z7TFMFEZZ60EWG\r\nDate: Wed, 18 Feb 2026 13:18:37 GMT\r\nLast-Modified: Fri, 07 Feb 2025 08:50:51 GMT\r\nETag: \"bfbe6b0405422cc264680437fefcfb96\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 29193\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bfbe6b0405422cc264680437fefcfb96","sha1":"c6b51299017551415982de1d412e90d05d7d84c1","sha256":"0a543865636f37f781adb998e145a6ef5a8c87c9fac6a077fafc3c703e9a8800","sha512":"9930d3e7941377d680207ca7b70da191463d20e19b6ad4c85a47f0ed1ffc2797f45675c488d8f411f26fc60a9682285c826c4deacc2e563042d0e92de48104ff","ssdeep":"768:gEBJN3nmxAwTxC4nphzFZnToJu2yN4tIzh2v/lv0lahA:gE5mxAwTwatFuDyN4tIzI/B01","tlshash":"26d2f158535aa13fb7d822dc3ac7f826f32a518cb180f05227d50c66633ad872d547d3","first_seen":"2025-03-06T11:30:53.668336Z","last_seen":"2026-07-24T06:14:46.387323Z","times_seen":186,"resource_available":false,"data":null}},"time_used":1949,"timings":{"blocked":1365,"dns":0,"connect":0,"send":0,"wait":302,"receive":282,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:44.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 19:45:45 GMT","end":"Mon, 11 May 2026 20:45:43 GMT"},"fingerprint":{"sha1":"2B:E7:9C:F1:20:87:57:1D:74:57:A3:8A:2F:DF:E8:53:2C:1B:2D:9F","sha256":"72:65:51:C2:D8:A0:F5:34:00:8F:17:4A:E9:58:C0:8C:A7:4E:37:0D:45:CB:74:E2:1B:47:B6:1F:87:F5:36:E0"}}},"request":{"raw":"POST /batch?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 783\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":783,"data":"[{\"eventId\":\"58672b24-d51b-45f6-bcdf-25a94468907d\",\"url\":\"https://krakexn6.vip/index.html#/Home\",\"domain\":\"krakexn6.vip\",\"timestamp\":1771420714600,\"props\":{\"type\":\"track\",\"event\":\"MODAL_OPEN\",\"properties\":{\"connected\":false,\"caipNetworkId\":\"eip155:1\"}}},{\"eventId\":\"4d625919-6680-481b-8e5f-2733b63bb413\",\"url\":\"https://krakexn6.vip/index.html#/Home\",\"domain\":\"krakexn6.vip\",\"timestamp\":1771420724601,\"props\":{\"type\":\"track\",\"event\":\"WALLET_IMPRESSION_V2\",\"items\":[{\"name\":\"MetaMask\",\"walletRank\":\"20\",\"rdnsId\":\"io.metamask\",\"view\":\"Connect\",\"displayIndex\":\"0\"},{\"name\":\"Binance Wallet\",\"walletRank\":\"10\",\"rdnsId\":\"com.binance.wallet\",\"view\":\"Connect\",\"displayIndex\":\"2\"},{\"name\":\"Trust Wallet\",\"walletRank\":\"40\",\"rdnsId\":\"com.trustwallet.app\",\"view\":\"Connect\",\"displayIndex\":\"1\"}]}}]"}},"response":{"raw":"HTTP/2 202 Accepted\r\ndate: Wed, 18 Feb 2026 13:18:44 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9cfdcfe8fe8b1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T07:50:59.280742Z","times_seen":17496376,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":31,"dns":0,"connect":8,"send":0,"wait":26,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T13:18:31.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 29 Jan 2026 20:46:37 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2BhnJChH%2Fr2XdGDLUxO9OzZFgcw5pYSmbtl7I0B0M4%2Bx0oylg7Grnz36MviYmTgB3Yf2d0CAM3B3YMLaaQMonOquG1X%2BkzbkcxLzFg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cfdcf95dddc2d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10790,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"a94cf09d11d3bcab3ca6d961167e5d42","sha1":"05038eeab9c8fe632402cdd0617983a80092750f","sha256":"f575362fb161a660ee78538b8fccc9bf7b459f5b36d7ba87ad2c6db2537d6188","sha512":"13130ff2cbf4d2da55dec18421908fc0c0b1ee5d6b992c133e0a206b44c8f4acb9e60fcd3a325650f9bbfeea8c7548f8f814d8dd827ee02ce6d5b1496b42b486","ssdeep":"192:vS6WuJz9Cc5T+KeP5VPkLrhkohUxSPNS6J1Dg6VEHnhZBt9HLtm9hafUCzCSDKCB:vS6DT28HJtUdrtmja8ItTEaIARgvY/","tlshash":"b1225367a8e300596457a2641ffb332d3635900b7746cda83f9d2ba48f83f858453bd9","first_seen":"2025-11-24T21:16:20.874299Z","last_seen":"2026-07-24T05:40:16.109893Z","times_seen":48,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":52,"dns":16,"connect":10,"send":0,"wait":355,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-b8f4bc3c.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-b8f4bc3c.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-b3df\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaGWhldPIHhV4VWXQue5hdyWeXRLF72kV7zmXOoFbnf7PCfGDB%2Bl5ptyWx%2FmEkNCBpJWN9Rf7euBrv%2FwWxvbNHkNiMAjybokZXWUXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4a949a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46047,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"6b68123ccfd4ec8c0e438da7086b7a1f","sha1":"c0e12d37824a9bfea426c0106014a2c8b4b45521","sha256":"0cb83030afb9ecdd4b13745d722793a85679ccf71430935af07cd15c62f21b7c","sha512":"66e8adb70cb32e1d579a6784f19c73b222a72356e0e6cd822c25d3bd87a1c71c6efefbf315e29392c3d61fa719c15248f5d529070fa35f47fa71d9c1c2d34a52","ssdeep":"768:TPYwbveYry4Iz74UeiUvT67sBnySYfHbh+8zSyzyXULTQC:D+qIzcUWb67sHYbzyER","tlshash":"7523b3a063acd2bca507836ccb1a7071271f24ff77058144f29e9a319b1618edd6bcda","first_seen":"2026-02-04T16:46:53.764491Z","last_seen":"2026-05-31T17:09:56.317095Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/ExchangeController-95d3f0e9.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/ExchangeController-95d3f0e9.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1279\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ETAAeB9VAKyiknPwd6x9jYGX95SRfs5FUpVdT%2B8RM4GkJIBU0z4VWID%2BRPzxFtiS5V9Wh9mVU8We1lLan1M5HsOsbovBxxsyWuf1nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f9a0a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4728)","md5":"6de440692a47dca51bde7e3a191f21ac","sha1":"a7fbe00656304c3ec11b8143e94d5cf0b108fd0a","sha256":"0ac6e5ff4b3c6fccd14e0c797985646c0e55179998d2a528e3a475b92dc6147e","sha512":"784d6736d9ebdff0a4ea9d1f15dbfd0312524925a898d8a5e5f4ae21086fc1ff17ca13d91fe4e45575fa25c3b8170f5e9ca8ba90d6d68f56233e09bdaf0616e5","ssdeep":"96:RvuMoxQCrTE2uT+1ei6jUofnBFnl+IApbP3LosjVrbrF:RvuM1gE2k+1ei+NFnopzo2Vvh","tlshash":"44a19600b0f2703296d929a025752520cb6d4fe9b467c5d5dbec0ea66980eabca3ce34","first_seen":"2026-02-04T16:46:53.777846Z","last_seen":"2026-05-31T17:09:56.220379Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=4\u0026exclude=c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96%2C4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2Cfd20dc426fb37566d803205b19bbc1d4096b248ac0w4548e3cfb6b3a38bd033aa\u0026chains=eip155%3A1%2Ceip155%3A56 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9cfdcfa7ceb5b28a-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1110\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Feb 2026 01:18:34 GMT\r\nlast-modified: Wed, 18 Feb 2026 13:00:03 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5745,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ff81d78aa8fa8bc91964cbdf56f347d4","sha1":"65a9cc56c6f09774260f21505e5cdc796a30f1ed","sha256":"469d53c47aa9a2f37e2633aa03758f21d5d71207c27a271ab030f777c0ce4691","sha512":"551a57fc4333030d5a28e51c50441b36c6fc9fbbcc2e2a44b93c023905403888b2273f517977633dea41b7ea74da0407a015aaee8e11e35ec41def86bba72abc","ssdeep":"96:NNbhiWUmyvx9JwTUmo5OlvoyM79hT4bRQ8osJohKlR8iqpmavlT:UwyJv4xo5cwb78V1fJl5ZadT","tlshash":"d0c1315f4bd0adaa8f34c784f56cf9eec52ee007c1ccacd9a5b0893541fe4a76641126","first_seen":"2026-02-18T13:00:30.991462Z","last_seen":"2026-02-21T20:57:40.309116Z","times_seen":12,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":117,"dns":23,"connect":18,"send":0,"wait":74,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 454\r\nserver: cloudflare\r\ncf-ray: 9cfdcfa98f7db28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21708\r\ncache-control: public, max-age=31536000\r\netag: \"cfUhkIr6pXeZzg1ZKkKbDihKqDfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 18 Feb 2027 13:18:34 GMT\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=460+4 c=1+2 v=2026.2.8 l=454 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0be57955d7f50dd9f7754b6dc10309f","sha1":"1120733df2e8f9bfde2f713c1de00711d356d4ef","sha256":"a29fe26a43771dee6d0de34f06c4aa118119e919a370bf6b37b89d89eb157547","sha512":"b115424fbd8acbdaa1fa6efc5e7f9b447adaa80ea67d542fd77c68fa0748f993670f6befa7458019db1243b2056f03872c714a500260333b50fd2aec778fc95b","ssdeep":"","tlshash":"02f05c1dc884c9a0bb9834cbe8a2089b02504ea0cba61a320a052dca102f45b0d5aa71","first_seen":"2024-07-08T23:13:44Z","last_seen":"2026-07-24T04:20:43.663282Z","times_seen":485,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-8d97d39f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-8d97d39f.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1b23\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vbjmDQ5%2BqRaJHDsfc1h5AjQXqnk60rLhiOi0E1v3iTA4nIZH3YZAKG%2BKjhWtlOSTE6Vlj9MvzfkM8W9QmnL2dmeEDf7gr%2BT2TxWJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa308e7a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6947,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (6824)","md5":"1a8256a5b1acc4ba17648b5138047595","sha1":"0f0ccbbdda839d3dea347f3419577415ad7066d4","sha256":"22e1c0792d38caee2d95d42830119d425014356177e30b2100fcb05cb2db5d88","sha512":"68bbc74532ffe0f3c9fb073e7257c90edaae84ec372f7e925d382f6c9b7ee5a5fba282973d8bc03e9cd27ee327c8ef83ca94df76471bacd226c068eb33d0d98b","ssdeep":"192:iDT4w36dUWkuJKFhVRRfGUTriL5XXs4mVc8:iDEIRRuUCL5dmVp","tlshash":"5ee1b601b929ae3cf73b84582406529161d09f59e630c2f6f3bc9b2266d5bf22f5db04","first_seen":"2026-02-04T16:46:53.812836Z","last_seen":"2026-05-31T17:09:56.248467Z","times_seen":15,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/purify.es-ee0e7e34.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/purify.es-ee0e7e34.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-559f\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obBw4JNGPJ7TCdF3kpCJDR%2Fjrx2bv2DTjQqwH3dL47lho5IIvC2M5CHKUugTxnCmTbkU4ie9yZdrEYaBA7sqZvPCU%2B%2BHMDwPjFy95A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa308e8a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21356)","md5":"6876b87eff5d4722c0cb96eea378f285","sha1":"51dc4b4bd50fb424cf7035d4600292c8a5c52d92","sha256":"963803d0b7e88b3ac060fa4912a3b372ac23f016ca168c2f09207c34994412b3","sha512":"f995dff3925f06a45041fc096fa3d02e71459b52bea7923dd1b77b3ee4d3ede58ef547852a6d441edb2bc8d6db2506ae1f32e0574015b5c49e6b5744fa106652","ssdeep":"384:Om7X5VqJzVKwv8PUMmKk5qRVqUM145DE9xp7wXTitrPYMujXt94DF9ZkgI7oXSRu:FD5eVXv8MMm55qRVqUM1EY/p7wXTitrp","tlshash":"e8a23c6dbd857d765bdb01e8a0bb6e0ca5bc100a740cc450e6cdedb514bae49206bf2f","first_seen":"2025-12-10T07:39:13.84643Z","last_seen":"2026-07-24T05:40:16.112458Z","times_seen":52,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/if-defined-49fb0c54.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/if-defined-49fb0c54.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 1076\r\ncf-cache-status: HIT\r\netag: W/\"697bc72e-a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfnmzy95hol28FYCtWF3dNt%2BAV0jiDWWGc9JKUcZ8ujde91tKCnHiFbV7wX%2F2v1%2BhXim7JuVsHIIsBEYtAnYMDDhfFSGDR%2FYCTtQWg%3D%3D\"}]}\r\ncf-ray: 9cfdcfa42918a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"7d621361c3cf5a5b3789e2660e55c8b6","sha1":"74b0e2b729580256ee560741bae5a18179dfabba","sha256":"2a7e9b535a681936d31c928126b80f9bf4ff8bd4d5b2884d585f225f9e8a27b7","sha512":"c914b923e869176389e5b1f12fd9346c12b732f8ae39cb4e8a404d518d259bcaf244cc68748b789a03d562c7279708ec257d015f56f19ffb3eeb385aa72cdae4","ssdeep":"","tlshash":"96c08c23a83842f308ca438ee824dc4a5010326eab224282f028235648721805aadc06","first_seen":"2026-02-04T16:46:53.781255Z","last_seen":"2026-05-31T17:09:56.225633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e741169d.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e741169d.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/receive-316eb367.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c3b\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7aPgPIi%2BflqT6V%2F6vji0IZzx3R1q4NhfJh5OQKrqYMTPrXNNnFWlTzD7uEL2m0yR%2B7D%2BGdcV5DVdeL%2Br3v%2Bhr00wZwiP1jPOxrjerw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5d982a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3131,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (689)","md5":"5b62b9b407c529fc0da47e9ba1970838","sha1":"e8e33ef821c1a209d5faa67ecdf5ed44a2601102","sha256":"4bc5ad130c6753c244d1f84e333a73a401d6260e12850add9bc8ad3e4d5faa35","sha512":"525a807cf38aa58f8ae3f7b058fc3795e9f894e150aa2d00f898238e8a40e743dc49817960f46577de01d27f2afa8ee0cad992446fe79b5113acbf2528f0a6c5","ssdeep":"","tlshash":"d95177c5772b50b49103e0d40faacd400b2291179526cabfbdef71f58fae7496819332","first_seen":"2026-02-04T16:46:53.839579Z","last_seen":"2026-05-31T17:09:56.208641Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-41281e13.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-41281e13.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-f7e\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCDcCPfCWQzVMqQiPIdzHnSz7E%2B7MALbJn1htNzRA4mIsI361%2FU9afnuw7%2BsRx0nvJ4F6%2BWGmtKym%2B2MvWrtAwcf1EFIViO4Hp9B9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f998a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3966,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (863)","md5":"435ca00c4f345dbcb554c9ae1f29a53b","sha1":"5136cb478d1dc98a99199e1f5128e0eaf8ccb437","sha256":"f2736697b8e3a0873e3b73ff8b49541b3f6b9f3cb589b98f1203776061152c54","sha512":"b5daea056d99d452cff95399e238e6f4a5b868aaf50518cc0c54db5be7313867d12319bd233b701e4b32b3b3b2476bdded612d92521d2cc3d35dd27dcb57b82f","ssdeep":"","tlshash":"7581979ab6771864342b4264fbde4b245231b05e0a1bdd75f3cc12d58f48aa89b4b231","first_seen":"2026-02-04T16:46:53.763426Z","last_seen":"2026-05-31T17:09:56.2171Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/home-f7f6e3ca.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/home-f7f6e3ca.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-fb848e84.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-58f3\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9GL%2BviF9bgCsBeZKJ6FNo70y3z4%2Bt0yffvT3INIdy5P9EMGHyNYTwfnJxsICJGy4lcgp8ITKNcVpaM%2B4WHSE1cGIQxv2CkRPP6e2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa2b8d2a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22771,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15537)","md5":"bc181fed22e1167ff09eb3cfbd4736e4","sha1":"22f69fd504bd84065f2258a483ce60c214c6aad4","sha256":"d7ea5e8ecff85d0b64602d9eda14893bdeda7a452276d7cdcc4d3f2c298aac72","sha512":"5f15549489d9579364a61153a705ef896aff88a6d9b628dfb07a057c15772d60bc8b55144d6b62fd659f3a788abd41e5b6aaf33826d7b24606507eef9e462fe1","ssdeep":"384:+yqoCYg+Z0YKJmYyoLD6pS2L86DaiEkR64Q/Or3RL3C38cu9INSQa6MjDX4syEp2:7Tu+Z0YKUF+6pL86aeRu/Or3dC38cuij","tlshash":"dca2ead9fd0ada3eb5f209944598000135141feee52181d1b4fd1e1a1bebe7e13afb2a","first_seen":"2026-02-04T16:46:53.786814Z","last_seen":"2026-05-31T17:09:56.240705Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-a147cb61.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-a147cb61.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-38263\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwysqqoxnvmazHri4vSk7Zi3DyKommMr0P13whawH8eCCT1zT4WhMu9WY3QvcVQTAOHBYo6%2B5WYNiXFYcxCQc2l8uDXM%2FjY8W1nh%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4692ea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"909a97120c66fa075b925f65a92fa6c0","sha1":"89842ccb9918db72cac69e7fc4d9e14d5ca82bd3","sha256":"2bc3bdaca275aed8e5d78c82d9df75246d63f67efd0e2214ddf3a33f25116f05","sha512":"f1695a90f4b9bdb9143b06f302686264704e27ede117c7fa86df0aee6403f7e66c67d2935c05863e813a66b7c9e3420f2011ad73d12bf8f2f0506491ac3372a5","ssdeep":"3072:i5Ez0b9FEyZx3ccs9kIX8JMb7gabb6PJq7bLGg4sdVjdO8R5rwl+y8R5rwl+GQhu:viZmciREYPHeQIqcg4QImsQLDJ8u7dgl","tlshash":"3c24f8546bb06d186a5392a9889f4b00d230541bc22d85bdf7ec92f1cfa97c54cef3b6","first_seen":"2026-02-04T16:46:53.826072Z","last_seen":"2026-05-31T17:09:56.259861Z","times_seen":15,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fc69a8b8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-fc69a8b8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1363\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=976DjyqJF3ibqWb7%2BQy2T%2B64aG82JnQxl6%2FwZnx1JfFhiJ%2B3gK35MPbJ0NroabbxuR2Hq1LWVSwILB6MK7QEB99%2FoLiijYMHa1GBLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa46931a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"a19fcfb4babf16e983b165e96ff20d24","sha1":"27fcb0f3fe20e107a99565f6ba4aae39266238e1","sha256":"7666d359e9a42908994b110abfd09d4487cc9eb7b826ebf03dbf6b95764727b1","sha512":"4f196e2610b6bd3398ae1f6d9fdc7b36dbfe2098c612bf5a5ced1df5baff1a2010f903275bf4f5fdf6f41bbe1c6d09637474caae0447a63214dcfdd0c127d2dc","ssdeep":"96:0jgJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0MJTFyhlqTsd9fTOsy6Xd","tlshash":"fba1a5a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fad088d8df299","first_seen":"2026-02-04T16:46:53.784368Z","last_seen":"2026-05-31T17:09:56.21646Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-bc8c8fdc.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-bc8c8fdc.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bcf\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8Wp0s84x3NgC1lXSZkW4a3xaVM5t835cQEvo5gLr3pYFzEn%2FSk0uThoLX%2BohLCPH7hMJAzF5AguZAMvdTKWHHuJjw1JXe36%2FkwrWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa47934a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (607)","md5":"5062afef6ca30ae3b81acfdbd0a60979","sha1":"9977f463a922b994dfa091f10666cf45ec2224c7","sha256":"b03c93c30f2003764dafafd83df6d0aa83bed9f5609d8d0a3af3db3da80f90c9","sha512":"fc2216e68d6dbc4affaa01076ca3ebf30198b3dbf7f1bf500bd7766fe63539376e307959661127c4092009b4e0145b305d95352688ddc71edbd7520426572a72","ssdeep":"","tlshash":"c551a7d7b33a12763851d2945eae5ee05222e01ba11dde3ebbce61e84f461851c36632","first_seen":"2026-02-04T16:46:53.783617Z","last_seen":"2026-05-31T17:09:56.192135Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fb575795.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-fb575795.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-bdc\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUzA%2FaA0y%2Few8tOUcU5FfvRQGpV77xh0t5wg7rBiiRczDbIYIhXdm1O1l%2F6%2FRTc3KTp6nwm1zNuKewmeiJWPFqxbQO1W5WGRqgLKFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa47938a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"bfbd4d4111a878f1499dc221cc34ee00","sha1":"ea79aa5e373e5732d0d7f954dc18d35482097f23","sha256":"ced931c158dc0c3ab102dc348b126a71ffe88d5894dae2d04337a0007d00e035","sha512":"54cfd6160dd4088372ee8c9c668e763f3201ab5449b6653020a94b0198bcd03e7b4261608f35eb056c1c1cd10247635b6b925e957815fb11a21a5538872e8c01","ssdeep":"","tlshash":"7d516485a666582d520390adc77f4c01973ae41fd029cafeb7dc50f54fba98115ba331","first_seen":"2026-02-04T16:46:53.772028Z","last_seen":"2026-05-31T17:09:56.361015Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/dot.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/dot.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jNXlaC0LWrdu+cZXpFQD28G8YVW4oE0LG5u1DEYHdS+dF1RDjeZKZyXLk8EczHHGWQaf7U46it0SbwMX/u8qOMlmZnX4yUay\r\nx-amz-request-id: 6R0402W4NSQ51CJX\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:58:32 GMT\r\nETag: \"ecbeee3b982b8166e9b11ef7f85a9bdc\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3040\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3040,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecbeee3b982b8166e9b11ef7f85a9bdc","sha1":"79c69d70b46af0d2eb0447096fb9ef48873d24b0","sha256":"2d212db8dacb8164a85eec84c39038a4013d398d1fdbc680399c260a013f52a5","sha512":"6a47534c5310fbded78567b1860c94d6bd07e2e186fd7fb5057431d45b5fc80f580fc6ba4a5782e034243d2c9f1f47dc732dfab74551fc14f52b0a40e11b9472","ssdeep":"","tlshash":"d6518591b339d2b8b005f7fe023a6cb1ab926de27e33c5a55bd60c14d04740d8a925f7","first_seen":"2023-08-11T01:17:56Z","last_seen":"2026-07-24T06:14:46.336007Z","times_seen":738,"resource_available":false,"data":null}},"time_used":1225,"timings":{"blocked":928,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-36ac775f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-36ac775f.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/home-f7f6e3ca.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-716\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UurM3naG%2BWmG7GNikLj7aFgJdd9rdjTojkRR2Q04Sz3wE2RO07oXmGHr%2FqAkAd7r8BZTBbudbKqaQxH%2FWSglcjjnHv5I19fUoEmYjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa2e8dda106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1813)","md5":"7dc571e1d41872c19d3e477d67867cf1","sha1":"fd5d38c3552d5cb005b2dd4b72b129dd1420407b","sha256":"25899152b3f7de4f92c83755a209ec165df005954b3ac2e92177c7d9d5bc5ceb","sha512":"68d28c6f616d8c2c34ebbff051f58cf2025a58b992ccf121e3544d094c73700b50071e2a367cc4c6d05579695fbafe0fa7df69f1c0ff9198f0880fbae6c4e355","ssdeep":"","tlshash":"943185c2b4d73579b376cd9dc0984860923c0d48f40597eaf17f5c2e2b601c0bb1ab18","first_seen":"2026-02-04T16:46:53.800083Z","last_seen":"2026-05-31T17:09:56.337344Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fc69a8b8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-fc69a8b8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/w3m-modal-a765f42e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-1363\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUeXGAB4PxNrovynks%2Bxs3DSR4CvmnFBf4GlbZqrc5X8S%2F6ZnoW59CXjrRzPIeKMQM1cB2NJn2ddrV4Z6zsmm1nNofYsG9HJuZqu1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5f999a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4963,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (727)","md5":"a19fcfb4babf16e983b165e96ff20d24","sha1":"27fcb0f3fe20e107a99565f6ba4aae39266238e1","sha256":"7666d359e9a42908994b110abfd09d4487cc9eb7b826ebf03dbf6b95764727b1","sha512":"4f196e2610b6bd3398ae1f6d9fdc7b36dbfe2098c612bf5a5ced1df5baff1a2010f903275bf4f5fdf6f41bbe1c6d09637474caae0447a63214dcfdd0c127d2dc","ssdeep":"96:0jgJPrKA7PyhcGqPrtqYWrTHm5ZifPrvWsxzo6Xtv:0MJTFyhlqTsd9fTOsy6Xd","tlshash":"fba1a5a821f2db9dc9164198c6e72e10e377005b962dd0a1f2fd13d69fad088d8df299","first_seen":"2026-02-04T16:46:53.784368Z","last_seen":"2026-05-31T17:09:56.21646Z","times_seen":15,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/manifest.webmanifest","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 461\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\netag: \"697bc72e-1cd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTiBQG2YsoGknQCtKn4JDtd2qOp9IwAozCkY4n5q%2FglKxJnod5Zqqis7XPg5KZapmocv4kRMP%2FQK3KGI5rMiyhjFyl9txy444TcqGw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cfdcfa208a6a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-07-24T05:40:16.123377Z","times_seen":47,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-22248626.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-22248626.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-c03\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jL5PllwP4n72ZNQFCvJb%2FtASg0dt404V29UMZt8kvMctSzkDGl72Wv%2B7uiO8biPlWG8jdSd8Wduf9Tly7jEYSfeTFijqTcM6e2u0lw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa45928a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (562)","md5":"f4535c3dfdc1c1cea5bb44b6730fffd3","sha1":"6da0c4926c4ce60ee0913504fe796301ea9c5fe8","sha256":"0fc3eab7dbe23c18070fd0c31600b8c46caa9ff7f41f535c83d0d0de72dd4af0","sha512":"d449b015d2467d3b3cf764933c7922baca9a8fef4e09192ca11b2e6047f6b63397530ec0da166c6504880523fb7e1f2be89a333ce3119225dbbe73376047e07e","ssdeep":"","tlshash":"9d5188d0bbf7797d25328025a46a98104326c007d378cbb9facd92f60f9964154e7377","first_seen":"2026-02-04T16:46:53.833025Z","last_seen":"2026-05-31T17:09:56.241615Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-5ba2403b.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-5ba2403b.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-104d\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BBlNECTUbmEJ%2BbYBuRwxpNcWgTTBz%2Fr5j3pOPFNSjzt1rG8a1pakgoELnejQnK492%2FVXyv9X4JKBYmlU15jv0LxMa9y%2BKC1g9vfcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa49945a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1677)","md5":"af6fbe24712cde764ac18f0390ce5a36","sha1":"42da477ef31a7c14b9553b29e5ab01d1df320f16","sha256":"d275eb8d9bd36fcdf07ae50de4c32b0e958b4225922ceb8a570d683b1dde8562","sha512":"2f72bf1c2072a4c0a961c5761902f0975891f4967cea7304db4262903aebd6814d5f7c96fcecfd13b3fa6a1b39ee7a81240f24e24154d8305e79bce511702021","ssdeep":"96:cp5RKvg3juUYlFmZm7sG7j2iM+3YL1YSPO/X/67DYoSYSPOAcg6ed4Qy8J6l:KRKvKuUYlFmZ0nvG+IL1YS2/Xy7DYJYx","tlshash":"7e81b868b37d217979c390588d366d01d335401ad11ec9a07bdca0e78f9a2ca9db7772","first_seen":"2026-02-04T16:46:53.794723Z","last_seen":"2026-05-31T17:09:56.227414Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/NavigationUtil-a0d0ce87.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/NavigationUtil-a0d0ce87.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-a147cb61.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 1076\r\ncf-cache-status: HIT\r\netag: W/\"697bc72e-45\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKPGkGUIlwN6VTKh02%2FaHoOY8z%2F8%2F%2BbKD1bZYsAKukdqQWCd578%2BNFfvM7bpWackYxNCgq0iPF3aBS%2F9HXRIgaw6muo25mvqFJQZYw%3D%3D\"}]}\r\ncf-ray: 9cfdcfa609a9a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-07-24T05:38:46.703124Z","times_seen":112,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/bts.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/bts.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 0GtPdmUVKv2nmlhFt7gNFMcKVIfAupb9aPg8usp9hZxQGBql1Lzb6FlD/otXC9AHI4Qu5gFtOiqve8qivSvCA3J0BOKhh99S\r\nx-amz-request-id: 6R04J3SXMMS69QXQ\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Tue, 27 Jul 2021 08:40:04 GMT\r\nETag: \"a12001eba3f8b40d252d09e0d21f6884\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 1433\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1433,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a12001eba3f8b40d252d09e0d21f6884","sha1":"874702fd7e69b788e419bd5258c9a80a9edc486c","sha256":"c9c78d7bb49415d4816f380f883baff55ce5f88997875c36d8ea98846a191c5e","sha512":"891a2a6a3f995e8070e6a6f2c6b9922be3539cbc22347e05fd867ee4a49495a5a6d2f4a7db5bc641daa3c981d143d14d7526d018af2252ba3f7477f7e6afb931","ssdeep":"","tlshash":"0c217411b324a23c30087afc527ae473fe605ef2951150d4dbd90d80f95266dada2dd3","first_seen":"2023-09-10T20:06:11Z","last_seen":"2026-07-24T06:14:46.389451Z","times_seen":280,"resource_available":false,"data":null}},"time_used":1525,"timings":{"blocked":1223,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/v1/api/pay/getCurrencyRate","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /v1/api/pay/getCurrencyRate HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rdwwnV9X8xkxwcwXgogAaif%2B%2BhdbwC16aRpeMjRAVri9eNArVRzAaIEpK77%2BiFHvGRYqpq9AYpKY%2FKsR%2Bz6%2FW6HThyRLGJUGWoMXhA%3D%3D\"}]}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate, no-cache\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9cfdcfa208aaa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f3af69d6cfaef8e5e8e8ccd02ff1b97f","sha1":"9c441501e0ee93184622535720ebe3be1dd437fc","sha256":"17127bd763c5a337c91c752c5519ceb8b2a38c5f6fc1951d687e0cb2c1b85625","sha512":"1da0c7c069e72af6bdab26a607d6aec0df0e112e623b77b0990e687574299849ddb3eb5ba5515c7627ee242ed2bc082e30688cef8da99d65f370916a3d1ca4d0","ssdeep":"","tlshash":"6eb01255ee1a90e2e802d00150aeffc09968306386c01320e4dc87199555561a042426","first_seen":"2026-02-18T13:19:04.037377Z","last_seen":"2026-02-18T13:19:04.037377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-73a416b1.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-73a416b1.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-dc69\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7LN6ZGwW2VNsB0UC0W%2Fmd%2FgGE%2FyE3w4wiVF0X5IJaZ%2BrY3JiZUupUiQjI%2F2YtSXBpgFM3cs9O5ovXy73xf5slpEx5D21tVevdPjIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa41911a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"9a660b7078c745fdaab3270c6fc3e98b","sha1":"2d99fd8689e3af20a4025ae2b1cb2f924f55198f","sha256":"b67214b060229cd6b6f2593dd6389bba5f00d5937fa88caf64f8178258261306","sha512":"aea458487621b0c428798e77f84d8428b86d0d545451bd02d81c3aac804320ff5b3d7ca9487ba1710691f88ad79054a73e80efc6fcdb6897918a7a25be340538","ssdeep":"768:ZlYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:wAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"f4431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-02-04T16:46:53.884885Z","last_seen":"2026-05-31T17:09:56.256946Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-e49b3847.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-e49b3847.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-4f6\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5pvHfEvfA5ggzLQa0PlJXUQQv5%2Fabd5jznfcmriaPepy74BDOzQu4C1tGQn6vkZXKUZCcXEmOKWTcYwI2RopZsOS2VY2RZndR6cPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa43919a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (663)","md5":"d0c0db380a45c9e6d064f13680d8a6a4","sha1":"59923bc02b8b720b31e7add2c4065dcfcc4bb9ed","sha256":"c0477de54e30e97c8ce95f96b922ed1c7b198efa117df59c9a91e3cafedbfd9c","sha512":"1645ae0cee632dd55d1365ee39c8e4430d284ea1c9e37f7c2f9c941d8957e0c538f1f18223aabe50360d59d34ede5f9d9718fe66a8b819f60dd15e18834e1201","ssdeep":"","tlshash":"1d21878417fb729475576188463c4b02d2324053aa1ccf3db3ad76e88f8c1c988bb725","first_seen":"2026-02-04T16:46:53.815492Z","last_seen":"2026-05-31T17:09:56.231941Z","times_seen":15,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-23a43da0.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-23a43da0.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/send-7c4c9d57.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-127e\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQF6tchDhrGCMRwdUlsAI9salWsgbuqg%2FAzYFhVb3Uv3hIHpJ5ty3M2LreGZp5300SfB7qPa1DY%2FHSO6%2FpkzP9JvMl0OViTeZAgvPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5d98da106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4734,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"31d761f11a6a640da2a8ae94065fed2b","sha1":"7faa07c2b610af19d7a7c9bb272e7b61e5bc9c67","sha256":"c6824b22eee43b6a27e5c14616d88cc4633c81432119b0e9a21f240a385ca739","sha512":"7cda7f5b1601f17b4420ee2cdf918b94883d116bbe0c97aee6d95bc3bb95341c207477644d519ef574865e8e68abd0e714234d5fb69845b7982000305a5ab056","ssdeep":"96:2Xs7o9KKKPhXLcK/RWbAoIlWY2vPUlCrYBdgEThTJ/U55VeI:2Xs7o9KK8ZMY2vcpaC5c7eI","tlshash":"40a144d22daa262a3951d098ee5b8900e321c007d22dcebdb9dca1fccf595c3107e722","first_seen":"2026-02-04T16:46:53.846655Z","last_seen":"2026-05-31T17:09:56.19633Z","times_seen":15,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:30:34 GMT","end":"Thu, 14 May 2026 16:30:30 GMT"},"fingerprint":{"sha1":"D8:71:2C:2D:B5:3D:53:98:D2:2D:2F:DC:AF:64:01:A6:A2:21:8B:8A","sha256":"B3:BE:10:0E:21:98:43:EE:B3:FC:2B:F6:07:76:41:7B:39:7D:0E:CA:44:71:6D:52:AA:AA:3D:E9:DF:FC:55:A6"}}},"request":{"raw":"GET /getWallets?projectId=0e45c9025a915de17dd5d63543260d3f\u0026st=appkit\u0026sv=html-ethers5-1.8.14\u0026page=1\u0026entries=20\u0026badge=certified\u0026names=Browser+Wallet%2CBase+Account\u0026rdns=baseAccount HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9cfdcfa7be85b28a-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1110\r\ncache-control: public, max-age=43200\r\nexpires: Thu, 19 Feb 2026 01:18:34 GMT\r\nlast-modified: Wed, 18 Feb 2026 13:00:03 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"dbf39dceeefd4e7b837a0d5954c94910","sha1":"4853dffc66c53275b73fb2219ed5723a5d6831d6","sha256":"1627d4121b7cb00b96ee320b37893b30d6e0a2e89f93a21bc43522e9599b6bbb","sha512":"86fe88adca5689e8c3ceeadbdb61ae7ab42c6ced4756256d278f0d151977ddcd3c1f9b5b1444a87fcf258602d04b866136aa339d83f4342dae002de9eccdeb0f","ssdeep":"","tlshash":"5290025138485e1cdb491c59f04a7a52604c149324100f7590c05b0446a44361700474","first_seen":"2025-04-08T11:31:59.266604Z","last_seen":"2026-07-10T12:36:30.191045Z","times_seen":61,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 03:00:19 GMT","end":"Sun, 26 Apr 2026 04:00:16 GMT"},"fingerprint":{"sha1":"06:96:2B:A7:16:04:70:E2:E8:5F:1B:69:8A:D8:D3:23:53:25:70:1E","sha256":"25:46:C3:C0:80:39:3A:62:7D:18:59:B4:5C:82:98:75:26:A1:D5:60:A1:A9:C5:5F:9D:53:92:8E:60:8A:F3:FC"}}},"request":{"raw":"GET /mdi.json?icons=clock-outline%2Ccurrency-usd%2Ctrending-down%2Ctrending-up HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/\r\nOrigin: https://krakexn6.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWDVMyONqcOgNUl%2BAVtfPTYlBaNl8DVAzNRWEfzVbQLJHdx3%2BSuvIkOHmWFjpVL1k%2FT1HmtPnun1ThrTT39Gs%2FrZ54THJae%2BnsCQw4996UVK\"}]}\r\nlast-modified: Tue, 17 Feb 2026 08:22:06 GMT\r\nage: 104187\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cfdcfaabae14435-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":952,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7e96920da89cc922274247fcd293696f","sha1":"84896a016118ac7d371cf40b55601c9b2ea16e08","sha256":"03818c009e623cf4b6169657f9cb99bcd53e89fe152cc1809154c5d018982e8f","sha512":"99764c35f30fa0ffa84d012975cbe5c977d1272b6f9cc25cf47ad25f0a27446fff2ec7cf9dfadc74714a97df2089c1fdeeed8f39a38ca0d49db04b9baf815ede","ssdeep":"","tlshash":"2a11bde12e3ca3ae80c7438e855641669b2f73f571064c901b3ca5323105becf883928","first_seen":"2025-09-06T11:46:38.597902Z","last_seen":"2026-07-24T05:40:16.109368Z","times_seen":104,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":15,"connect":11,"send":0,"wait":16,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/css/index-21b53c44.css","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/css/index-21b53c44.css HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: \"697bc72e-1b4f\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPa8fzBH8mXyOYNyuXeqBotzTnlNu%2Ftc%2FRHjz5D0LScKcUs2DYL3CUHcOgLn13IWfQesKLH48SuA9fTpBs5VeJl2jYHec%2FiwLUkfag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa248b7a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6991,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6990)","md5":"4c5be293d21e28e6defc1f29ca14d0c7","sha1":"0519ba50e2bad057e581c8656f2931735c9ab39d","sha256":"21b53c444ab715f26559331069112c974ab29f75c03f3e886da16d426835b429","sha512":"34060427eaa86c6e8a53065165954a217a76002118f4e42ffbc5d9ad9d68ab67d3f2cccc7fafb347108bcd069ce0f5e8bea4f5b429f0a6173183949a9e3c5cf1","ssdeep":"96:xuUFdLcu/dhPG3OMj2s5LqOsXzmXOX5Xis:EUFdLd/dhPQzas5OOsXzmXOX5Xis","tlshash":"2ee10d27110a2208f233ce8857e4976486b9e527d20616ed62713826cfd7fc727e638f","first_seen":"2026-02-04T16:46:53.860881Z","last_seen":"2026-07-24T05:38:46.722311Z","times_seen":35,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/manifest.webmanifest","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /manifest.webmanifest HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 461\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\netag: \"697bc72e-1cd\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7pKAEIUS%2BrM7fYMv2G7Vd8kj91dNdeifPY3xYlrsa0lx81MxA6jfwC28LPROaJ8DyUdjP4Ww5R1Tyz5tgJO4Iu%2BhUfKuV%2B6VPDz3zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cfdcfa228aea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JSON text data","md5":"15523f10e987841f71556786347ff131","sha1":"39804eb5b1679b7cca1daecf7de966f1652cc0f5","sha256":"00d2e8aa53a9d3c7108e0dd5f77d773e3f1f946d9b7b9af1e1874fa374a5fd1d","sha512":"191c6b13972c3d9754f8cd7c668a662bb33f9ae1f3aabb49f964bf1684092667da46ec45daba183f0bc2800b5349eac3c3a769085268c9732b052f7c5ceab162","ssdeep":"","tlshash":"03f05c0b44290bbbf75f91d900c9ed19d17a7022cbe4ee485d889e3884b4b6083373c5","first_seen":"2026-02-04T16:46:53.843681Z","last_seen":"2026-07-24T05:40:16.123377Z","times_seen":47,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/ref-826e0ba1.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/ref-826e0ba1.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-86c\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snmfHTwkWpoBGJp1JTFEacpxL9rEXvEUxejeSja82u8i7aXIRsGIaGgPnqKIdV%2FgqIpgUwaCUQB%2B5lbUXbRmgCYyGZv5K11i6advfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4391aa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1048)","md5":"2e132ab88957c55a3435e8f009fc8518","sha1":"1d51a5ea26f3171186efadb3b4984462078796f8","sha256":"07a9877e1a66c2405b5df7e17a832afa52706e88c777d1f08385a2d1315de871","sha512":"76bf398b2e46e52978f323c98e0ef6689463514d0c34eeb00de10a5ca56b80ae6da8ef78908ff17f8134dad26668e05f468e17f755a7ac81f8cd85812d1c9301","ssdeep":"","tlshash":"e941039773d801d212cac6e6fc37892af11131483a25845cb0ad6bf7e8306c791bddb5","first_seen":"2026-02-04T16:46:53.874417Z","last_seen":"2026-05-31T17:09:56.213446Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"huobicfg.s3.amazonaws.com/currency_icon/ordi.png","fqdn":"huobicfg.s3.amazonaws.com","domain":"huobicfg.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.155.112","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3-ap-northeast-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"46:67:AE:AC:E3:C2:0D:C4:55:CA:3F:CB:B1:64:48:00:87:D7:E6:91","sha256":"18:7F:98:1B:96:0A:EE:5D:A8:54:AC:EE:61:CD:E2:1A:42:79:57:6C:BB:97:D4:54:5F:AD:91:87:86:84:69:D8"}}},"request":{"raw":"GET /currency_icon/ordi.png HTTP/1.1\r\nHost: huobicfg.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: lw2OqBLMIzOOGKm2spF4KOI7yJ7m5vqHLGJPPOAFtvKZRZqChRfYhME61fEWAWj1+1ep2ow8H52jqc3v32NtEf5TEt8mGNHJ\r\nx-amz-request-id: 6R04P65MMZRS21PP\r\nDate: Wed, 18 Feb 2026 13:18:36 GMT\r\nLast-Modified: Sun, 30 Apr 2023 12:50:40 GMT\r\nETag: \"be20ec57e8a4aa7b2a338e48acdce782\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 3560\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3560,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be20ec57e8a4aa7b2a338e48acdce782","sha1":"141496897f907d601a749439a82ad40d805b2294","sha256":"35dc8d4477166c6aac8a1e3635443f93eddcf22f95f297aeda99b6e453923205","sha512":"43ba6eaa071f9abd823afe2c47cfd814fef95a73f89f3eaaa13fcf1589c5787bb2656a0018a394af52925b6063fd5d772d21bd5e99c5d3fb9797c538994b0bef","ssdeep":"","tlshash":"e771b5d452ad91e2fc43d3d6dac2115a787260a92acb8064f6ec5257af390eb4407394","first_seen":"2025-06-19T20:00:31.917814Z","last_seen":"2026-07-24T06:14:46.31516Z","times_seen":152,"resource_available":false,"data":null}},"time_used":1534,"timings":{"blocked":613,"dns":32,"connect":280,"send":0,"wait":300,"receive":0,"ssl":304},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/PhQuestion-25ab6f67.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:34.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/PhQuestion-25ab6f67.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/index-73a416b1.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-cf3\"\r\nexpires: Thu, 19 Feb 2026 01:00:38 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhfEW%2FlgHtAfQE8QwYuvk333n8JoFuL0E8nTffT%2FBfG4FT5%2FKM1OK1nrbVfwC4RmhDuxCM5a1YlpNDp490jeIeiPgz7xhVOMtBPVwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfaada4ea106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2285)","md5":"14249638ddde6f3d9ef7fc55d898f6e2","sha1":"1cbf4ffbbaf00d77848ffaa29c81559e9c6b143a","sha256":"87213dfb28bb899a9f4179d4f14ddc3c62a78efeca14736882e3fa0abc233ad4","sha512":"21aa681a15f9d78f935093ee29df120d43a5df20f3f6511d47c3137c0a5baaa07cc86c339f00c8a2aefcb50dc6dc3dcf5a49f01b9ce5cb7758ff9f724dd3497d","ssdeep":"","tlshash":"476144fb72462bbf75d4cbc04acd910615246297b1498931fbaa9788bd01db3e474732","first_seen":"2026-02-04T16:46:53.765296Z","last_seen":"2026-07-01T21:00:47.755737Z","times_seen":28,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-9a611939.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-9a611939.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-141f\"\r\nexpires: Thu, 19 Feb 2026 01:00:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCRjryNQ0MT3uQCQ%2BftXtMPjLrjD%2FyqpsVPatLMdT8%2FbCb5lgu3sCjhYO58H0b0cji4YZNFwKvW6C%2F0%2FG3iHT73VT9NmO0TDkWpMeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa258bfa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5150)","md5":"05124a4ad1f6f96c91241ebb8e7d16c7","sha1":"ead685e0674074a629d424ef75160625add44a4e","sha256":"be113779abcdc0cb0a1e1d1869dcbf25389766b7542af7026def949748c6b2c5","sha512":"d223f39fe2f71099a7508aab4bde8b18a50962bd84d786e020ff94d2f78e12d5173277ca697d8f67dbb8ff87d4424b1a92251198a255e3d9d6ffcd1f03accb0b","ssdeep":"96:v8z1IpDuWaa/uXikJM8G5KsvRCq6FYG+jXfbBOESn+Q8l9/AfVS6Yf5uUZS:gyaa2ikLG1vRL6FCLfME+fVGf0gS","tlshash":"2eb1a7e17190fcb7d739dacd406041e097ae57e07029c5deb16f9e03250acf866eaa49","first_seen":"2026-02-04T16:46:53.814164Z","last_seen":"2026-05-31T17:09:56.228163Z","times_seen":15,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-cd74709b.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-cd74709b.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-568\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79cRd%2F5GDipIXSf0QSXX65ALGWB5jNyHz3gysm312q2gkVk%2Fw0nKRB15pV9aDwVrrHSLYnA6TKPviulMm7ss4UAT3w1vnNiAr%2FzFow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa48941a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (458)","md5":"0fc74c900be93cca0373939467165043","sha1":"f2bb471fb224a0187844bd7cb409041a2535a6df","sha256":"54963202a423af8bbdd469ae49041855a08168972d6c49ef9a743b87a202bb40","sha512":"2f89be6b4d72668f91848e4f4415028e8c853132f3cbaa537129df8d3c6577dddc6bfda9ee467dc9a6b4faa2da63cb6e18d971e360c0c0e25660ae2dce336fc1","ssdeep":"","tlshash":"fe2136891679d7f105859594c6e9ad014125051bcf28d091b3cce1dd4f5ddc4c6b5b33","first_seen":"2026-02-04T16:46:53.816872Z","last_seen":"2026-05-31T17:09:56.230373Z","times_seen":15,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-bd925ac8.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-bd925ac8.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-19ab\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6iP6d826zu1nZ42Xzq7Tha0PgMTczbIIJxIijaM4oP9JHy7EmkOwYYrUgOYCdGW78ljriL5RfTu2hPDnNHOcZDw1KGJG7prPi%2BhUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa49944a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6571,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (737)","md5":"908b4d49e60de0f0eef5cd14e7141dc3","sha1":"ccce6c443afae8fcd004104854e4a6e8048ba84e","sha256":"f0f76ded5e71b63742052fd2ca4f49b68d25e0248e136cfb90198e498197d43b","sha512":"779ff0c5c21d8faac36ec4d7d3dea34c8d74c32b41fa15612907f95dcf0db800b3d1ac26ce90b97a09b4e347e948817fac9dff44bf39c87b2552bc2964e8cc98","ssdeep":"96:s/ZUlbMTdcJa3nmKwGY9PpIbCszmFmCzojShsU/MY9PpIjDoE7g:4ZYb+mK/Y9W/qXsjShsU0Y9aDoE7g","tlshash":"12d1b5bf3d666815a632c0a49f928c04d13190175b0c8c79bbfd19e8cfcea89766f764","first_seen":"2026-02-04T16:46:53.785273Z","last_seen":"2026-05-31T17:09:56.316243Z","times_seen":15,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-fe82323f.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-fe82323f.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://krakexn6.vip/index.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-593\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j0jeBQIwsSwQ7DP03GQa0XNoQLtag0bNPIT2M5fytExj2JLNlFhpuO0UNynvTqGqIHmJgejdk2uyJLk9voY9oMrBF9qWrW10D87dEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa4a946a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (582)","md5":"669e102e9270a19254b328309b7bd79b","sha1":"9065048ce1d9bd81c1f14b5b3ee823b1a67ee7e9","sha256":"3943b950c4e04f14f4a73d99c9dcbad0cc9b95a53af9cad067ca307f23c67a84","sha512":"dc1c963969f4c12f7985c870f95e517dd34d8a240a7e571c3c48ae2a897fcedde8b19edc58ba8f8d287c430c23563d0b13adc8bfbab046bfd8d0aa0534c17b98","ssdeep":"","tlshash":"6821a5ca277acaf089614075cf25300132376003932fda85b6de79b48f0c1c5866a7be","first_seen":"2026-02-04T16:46:53.831665Z","last_seen":"2026-05-31T17:09:56.217679Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krakexn6.vip/static/js/index-73a416b1.js","fqdn":"krakexn6.vip","domain":"krakexn6.vip","tld":"vip"},"ip":{"addr":"104.21.45.178","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krakexn6.vip/index.html#","date":"2026-02-18T13:18:33.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krakexn6.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 27 Jan 2026 12:26:03 GMT","end":"Mon, 27 Apr 2026 13:19:46 GMT"},"fingerprint":{"sha1":"C3:3B:FC:47:CD:69:EC:59:C9:AD:36:B9:5C:42:7D:C5:30:FD:05:B0","sha256":"12:C9:82:A8:18:C3:F2:B4:4C:08:85:6C:7E:33:0C:D8:CB:FE:C0:6C:E8:ED:73:FE:FD:CF:B6:96:3A:C2:8D:F1"}}},"request":{"raw":"GET /static/js/index-73a416b1.js HTTP/1.1\r\nHost: krakexn6.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krakexn6.vip/static/js/receive-316eb367.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 13:18:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 29 Jan 2026 20:46:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697bc72e-dc69\"\r\nexpires: Thu, 19 Feb 2026 01:00:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1076\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LfwwH3a1mnbzIQw4m75ob6SN0axXfazwnvx9FgRn9n%2FKC2mMHR22uGiTIgly%2BPoI8RvqXSqjG6ZvgFNPe2beppNawLcHlTwDFTiiSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cfdcfa5c97fa106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56425,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9853)","md5":"9a660b7078c745fdaab3270c6fc3e98b","sha1":"2d99fd8689e3af20a4025ae2b1cb2f924f55198f","sha256":"b67214b060229cd6b6f2593dd6389bba5f00d5937fa88caf64f8178258261306","sha512":"aea458487621b0c428798e77f84d8428b86d0d545451bd02d81c3aac804320ff5b3d7ca9487ba1710691f88ad79054a73e80efc6fcdb6897918a7a25be340538","ssdeep":"768:ZlYbAKtopoe63kxu9MLMHPT5OYfuKg9MRyA7efn5l4/bTwItDdZismlowQ85W:wAKtopoeikI9EgBfnNyhfns72plowQ8s","tlshash":"f4431ae0b3a9e81898434f157b3e6170931b147f3726c2a5f34d2ba05fc66889b5db6c","first_seen":"2026-02-04T16:46:53.884885Z","last_seen":"2026-05-31T17:09:56.256946Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"krakexn6.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
